Download Cabletron Systems 6H122-16 User`s guide
Transcript
SmartSwitch 6000 and Matrix E7 Modules User’s Guide Notice Enterasys reserves the right to make changes in specifications and other information contained in this document without prior notice. The reader should in all cases consult Enterasys to determine whether any such changes have been made. The hardware, firmware, or software described in this manual is subject to change without notice. IN NO EVENT SHALL ENTERASYS BE LIABLE FOR ANY INCIDENTAL, INDIRECT, SPECIAL, OR CONSEQUENTIAL DAMAGES WHATSOEVER (INCLUDING BUT NOT LIMITED TO LOST PROFITS) ARISING OUT OF OR RELATED TO THIS MANUAL OR THE INFORMATION CONTAINED IN IT, EVEN IF ENTERASYS HAS BEEN ADVISED OF, KNOWN, OR SHOULD HAVE KNOWN, THE POSSIBILITY OF SUCH DAMAGES. Virus Disclaimer Enterasys has tested its software with current virus checking technologies. However, because no anti-virus system is 100% reliable, we strongly caution you to write protect and then verify that the Licensed Software, prior to installing it, is virus-free with an anti-virus system in which you have confidence. Enterasys makes no representations or warranties to the effect that the Licensed Software is virus-free. Copyright 2000, 2001 by Enterasys, Inc. All rights reserved. Printed in the United States of America. Order Number: 9033404-02 Enterasys, Inc. P.O. Box 5005 Rochester, NH 03866-5005 Enterasys, NetSight and Matrix E7 are trademarks of Enterasys. MiniMMAC, FNB, Multi Media Access Center, and DNI are registered trademarks, and Portable Management Application, IRM, IRM2, IRM3, IRBM, ETSMIM, EFDMIM, EMME, ETWMIM, FDMMIM, FDCMIM, MRXI, MRXI-24, NB20E, NB25E, NB30, NB35E, SEHI, TRBMIM, TRMM, TRMMIM, TRXI, Media Interface Module, MIM, and Flexible Network Bus are trademarks of Cabletron, Inc. UNIX and OPENLOOK is a trademark of Unix System Laboratories, Inc. OSF/Motif and Motif are trademarks of the Open Software Foundation, Inc. X Window System is a trademark of Massachusetts Institute of Technology. Ethernet and XNS are trademarks of Xerox Corporation. Apple and AppleTalk are registered trademarks of Apple Computer, Inc. Banyan is a registered trademark of Banyan Systems, Inc. DECnet is a registered trademark of Digital Equipment Corporation. Novell is a registered trademark of Novell, Inc. CompuServe is a registered trademark of CompuServe. Sun Microsystems is a registered trademark, and Sun, SunNet, and OpenWindows are trademarks of Sun Microsystems, Inc. i Restricted Rights Notice (Applicable to licenses to the United States Government only.) 1. Use, duplication, or disclosure by the Government is subject to restrictions as set forth in subparagraph (c) (1) (ii) of the Rights in Technical Data and Computer Software clause at DFARS 252.227-7013. Enterasys, Inc., 35 Industrial Way, Rochester, New Hampshire 03867-0505. 2. (a) This computer software is submitted with restricted rights. It may not be used, reproduced, or disclosed by the Government except as provided in paragraph (b) of this Notice or as otherwise expressly stated in the contract. (b) This computer software may be: (1) Used or copied for use in or with the computer or computers for which it was acquired, including use at any Government installation to which such computer or computers may be transferred; (2) Used or copied for use in a backup computer if any computer for which it was acquired is inoperative; (3) Reproduced for safekeeping (archives) or backup purposes; (4) Modified, adapted, or combined with other computer software, provided that the modified, combined, or adapted portions of the derivative software incorporating restricted computer software are made subject to the same restricted rights; (5) Disclosed to and reproduced for use by support service contractors in accordance with subparagraphs (b) (1) through (4) of this clause, provided the Government makes such disclosure or reproduction subject to these restricted rights; and (6) Used or copied for use in or transferred to a replacement computer. (c) Notwithstanding the foregoing, if this computer software is published copyrighted computer software, it is licensed to the Government, without disclosure prohibitions, with the minimum rights set forth in paragraph (b) of this clause. (d) Any other rights or limitations regarding the use, duplication, or disclosure of this computer software are to be expressly stated in, or incorporated in, the contract. (e) This Notice shall be marked on any reproduction of this computer software, in whole or in part. ii iii Contents Chapter 1 Introduction Using the SmartSwitch 6000 and Matrix E7 User’s Guide ............................................. 1-5 Related Manuals .............................................................................................................. 1- 7 Getting Help..................................................................................................................... 1-7 Using On-line Help................................................................................................... 1-7 Accessing On-line Documentation ........................................................................... 1-8 Documentation Feedback .................................................................................. 1-8 Getting Technical Support ........................................................................................ 1-8 Online Services on the World Wide Web .......................................................... 1-8 Global Technical Assistance Center .................................................................. 1-8 Chapter 2 The Device View Viewing Device Information ........................................................................................... 2-2 General Device Information ..................................................................................... 2-4 6C105/6C107 Chassis-specific Information............................................................. 2-5 Menu Structure ......................................................................................................... 2-7 Port Status Displays................................................................................................ 2-14 Selecting a Port Status View............................................................................ 2-14 Port Status Color Codes................................................................................... 2-19 The Chassis Backplane View.................................................................................. 2-20 The Chassis Backplane View .......................................................................... 2-20 The Chassis Manager Window ............................................................................... 2-23 The Module Information Window.......................................................................... 2-24 Viewing Hardware Types ....................................................................................... 2-25 Device Type..................................................................................................... 2-26 Module Type.................................................................................................... 2-26 Interface Description ....................................................................................... 2-26 Viewing I/F Summary Information ........................................................................ 2-27 Interface Performance Statistics ...................................................................... 2-28 Viewing Interface Detail.................................................................................. 2-30 Using the Device Find Source Address Option...................................................... 2-32 Using Device Find Source Address on Ethernet MicroLAN Modules ........... 2-34 Managing the Module .................................................................................................... 2-36 Configuring Ports ................................................................................................... 2-36 Configuring Standard Ethernet and FDDI Ports ............................................. 2-37 Configuring Fast Ethernet Ports on First Generation Modules ....................... 2-39 Configuring Ethernet Ports on Second Generation Modules .......................... 2-44 Configuring the COM Port.............................................................................. 2-49 iv Contents Using an Uninterruptable Power Supply (UPS) ..................................................... 2-51 Accessing the UPS Window ............................................................................ 2-51 Setting the UPS ID .......................................................................................... 2-53 Using the Test Option ...................................................................................... 2-53 Using the Disconnect Option........................................................................... 2-54 Redirecting Traffic .................................................................................................. 2-54 Priority Configuration............................................................................................. 2-56 Configuring Priority Queuing Based on Receive Port .................................... 2-58 Configuring Priority Queuing Based on MAC-layer Information .................. 2-59 Configuring Priority Queuing Based on Packet Type ..................................... 2-62 Broadcast Suppression ............................................................................................ 2-64 The System Resources Window ............................................................................. 2-66 Reserving CPU Bandwidth.............................................................................. 2-69 802.1Q VLANs ....................................................................................................... 2-70 What is a VLAN? ............................................................................................ 2-70 What is an 802.1Q Port-Based VLAN?........................................................... 2-70 About 802.1Q VLAN Configuration and Operation ....................................... 2-70 Configuring Your 802.1Q VLANS......................................................................... 2-72 Setting VLAN Parameters and Operational Modes ........................................ 2-73 Performing Ingress List Configuration............................................................ 2-75 Performing Egress List Configuration............................................................. 2-78 VLAN and Priority Configuration .......................................................................... 2-81 Configuring Bridge and Bridge Port Capability.............................................. 2-81 Setting VLAN Parameters and Operational Modes ........................................ 2-84 Configuring Basic VLAN Port Parameters ..................................................... 2-87 Configuring Advanced VLAN Port Parameters .............................................. 2-89 Performing Egress List Configuration............................................................. 2-93 Setting Port Priority ......................................................................................... 2-96 Setting Port Priority-to-Traffic Class Mapping ............................................... 2-97 Setting GARP Times ....................................................................................... 2-99 Configuring GMRP Status............................................................................. 2-101 Clicking the Refresh button will update the information displayed in the Port GMRP table without closing the window. ................................................................. 2-103 Setting the Device Date and Time ........................................................................ 2-103 Enabling and Disabling Ports ............................................................................... 2-104 Chapter 3 Statistics Accessing the Statistics Windows.................................................................................... 3-1 RMON Statistics .............................................................................................................. 3-2 Viewing Total, Delta, and Accumulated Statistics.................................................... 3-5 Printing Statistics ...................................................................................................... 3-6 Interface Statistics ............................................................................................................ 3-7 Making Sense of Interface Statistics......................................................................... 3-9 v Contents Chapter 4 Alarm Configuration About RMON Alarms and Events ................................................................................... 4-1 Basic Alarm Configuration .............................................................................................. 4-2 Accessing the Basic Alarm Configuration Window................................................. 4-3 Viewing Alarm Status........................................................................................ 4-3 Creating and Editing a Basic Alarm ......................................................................... 4-6 Disabling a Basic Alarm........................................................................................... 4-9 Viewing the Basic Alarm Log .................................................................................. 4-9 Advanced Alarm Configuration..................................................................................... 4-11 Accessing the RMON Advanced Alarm/Event List............................................... 4-11 Creating and Editing an Advanced Alarm.............................................................. 4-14 Creating and Editing an Event................................................................................ 4-21 Adding Actions to an Event ............................................................................ 4-24 Deleting an Alarm, Event, or Action ...................................................................... 4-26 Viewing an Advanced Alarm Event Log................................................................ 4-27 How Rising and Falling Thresholds Work..................................................................... 4-27 Chapter 5 Managing Ethernet MicroLAN Modules Repeater Statistics............................................................................................................ 5-1 The Statistics Windows ............................................................................................ 5-2 Accessing the Statistics Windows ..................................................................... 5-2 Statistics Defined............................................................................................... 5-3 Using the Total and Delta Option Buttons ........................................................ 5-5 Timer Statistics ......................................................................................................... 5-6 Accessing the Timer Statistics Windows........................................................... 5-6 Setting the Timer Statistics Interval .................................................................. 5-8 Repeater Performance Graphs .................................................................................. 5-8 Accessing the Performance Graph Windows .................................................... 5-9 Configuring the Performance Graphs.............................................................. 5-12 The Detail Button ............................................................................................ 5-12 Using Port Locking and Unlocking ........................................................................ 5-13 Viewing Lock Status Information ................................................................... 5-14 Determining a Port’s Topology Status............................................................. 5-15 Locking and Unlocking all Ports on a Repeater Channel................................ 5-15 Locking and Unlocking Individual Ports ........................................................ 5-17 Alarm Limits.................................................................................................................. 5-17 Accessing the Alarm Limits Windows ................................................................... 5-18 Configuring Alarms ................................................................................................ 5-22 Setting the Alarm Limits Time Interval .......................................................... 5-22 Setting Alarm Limits .............................................................................................. 5-23 Trap Selection ................................................................................................................ 5-24 Accessing the Trap Selection Windows ................................................................. 5-24 Trap Definitions...................................................................................................... 5-26 Configuring Traps................................................................................................... 5-27 vi Contents Chapter 6 FDDI Management Viewing FDDI Information.............................................................................................. 6-1 Configuration ............................................................................................................ 6-3 Connection Policy..................................................................................................... 6-6 Station List ................................................................................................................ 6-9 Stations Panel................................................................................................... 6-10 Performance ............................................................................................................ 6-11 FDDI Statistics........................................................................................................ 6-12 Setting the FDDI Statistics Poll Rate............................................................... 6-14 Configuring FDDI Frame Translation Settings.............................................................. 6-14 Information about Ethernet and FDDI Frame Types .............................................. 6-15 Ethernet Frames ............................................................................................... 6-16 FDDI Frames ................................................................................................... 6-17 FDDI Frame Translation Options ........................................................................... 6-18 Chapter 7 ATM Configuration Accessing the ATM Connections Window ...................................................................... 7-1 Configuring Connections ................................................................................................. 7-4 Adding a New Connection........................................................................................ 7-4 Deleting a Connection .............................................................................................. 7-4 Chapter 8 HSIM-W87 Configuration The T3 Configuration Window ........................................................................................ 8-1 The T1 Configuration Window ........................................................................................ 8-3 Configuring IP Priority .................................................................................................... 8-6 Index vii Chapter 1 Introduction About the SmartSwitch 6000 and Matrix E7 families; how to use this guide; related guides; getting help. Welcome to the Element Manager for the SmartSwitch 6000 and Matrix E7 Modules User’s Guide. This guide is a reference for using NetSight Element Manager for the SmartSwitch 6000 and Matrix E7 products. The SmartSwitch 6000 and Matrix E7 products encompass the 6C105 chassis (for the 6000) and 6C107 chassis (for the Matrix E7), as well as the SmartSwitch 6000 and Matrix E7 series modules. The 6C105 SmartSwitch chassis is a stand-alone chassis. It offers five slots for interface modules; it also has two slots for dual redundant power supplies (installed vertically to the right of the module slots), and a removable fan tray (installed horizontally across the bottom the chassis). The 6C107 Matrix E7 chassis is also a stand-alone chassis. It offers seven slots for interface modules; it has a removable fan tray (installed underneath the module slots); it also has two slots for dual redundant power supplies (installed across the bottom of the chassis). NOTE For Matrix E7 users: Modules for the Matrix E7 (6C107) chassis are third generation (6x3xx) boards. Third generation boards are fully supported in any of the 6C107 chassis’ seven slots. Second generation boards (6x2xx SmartSwitch modules) are fully supported in slots 1-5 in the 6C107 chassis. A second generation board in slot 6 or 7 of the 6C107 will act as a standalone module. The SmartSwitch 6000 Frame Transfer Matrix (FTM) backplane and Matrix E7 nTERA backplane provide distributed processing power. The backplane’s passive design provides a separate independent backplane connection from each module in the chassis to every other module installed in the chassis; each module contains its own active switching components (so switching horsepower increases with module density), and each module can be managed independently (via its Module Manager management component) or — for devices which support distributed management — as part of the chassis unit. 1-1 Introduction The SmartSwitch 6000 and Matrix E7 modules include: • • 1-2 The 6E122-26 and 6E123-26 SmartSwitch modules each provide 24 fixed 10Base-T switch ports (via RJ45 connectors on the 6E122; RJ21 Telco connectors on the 6E123) and two slots for optional FE-100xx Fast Ethernet Port Interface Modules (FEPIMs). Several Fast Ethernet port modules are available: - the FE-100FX, which provides one multi-mode fiber port via an SC connector; - the FE-100TX, with one Category 5 UTP RJ45 connector; - the FE-100F3, with one single-mode fiber port via an SC connector; - and the FE-100S1, S3, and S5, which provide one multi-mode fiber, single-mode fiber, or long reach single-mode fiber SONET/SDH port, all via SC connectors. The 6E132-25 and 6E133-25 SmartSwitch modules each provide 24 fixed 10Base-T switch ports (also via RJ45 for the 6E132 and RJ21 for the 6E133) and one slot for an optional High Speed Interface Module (HSIM) that can link the chassis to an FDDI, ATM, WAN, or Gigabit Ethernet backbone. Each HSIM provides frame translation between ATM, FDDI, WAN, Gigabit Ethernet, and Ethernet through an on-board Intel i960 processor: - The HSIM-F6 is an FDDI/Ethernet Translator, which can act as a Single Attached Station (SAS) or Dual Attached Station (DAS) on an external FDDI ring. Enterasys’ FDDI Port Interface Modules (FPIMs) provide a wide range of media connectivity to the ring. The HSIM-F6 also has full-duplex capability, allowing for a 200 Mbps connection to another HSIM-F6. - The HSIM-A6DP is an Asynchronous Transfer Mode (ATM) HSIM, which provides an ATM uplink via two media-configurable ATM Port Interface Modules (APIMs). The dual APIM design allows for a redundant connection to the uplink, so that if the primary interface fails, the secondary interface will automatically take over. The HSIM-A6DP acts as an ATM Forum LAN Emulation Client (LEC) so that it can transfer data between devices on an 802.x LAN supported by the SmartSwitch 6000 and Matrix E7 and ATM-connected end stations across a high speed ATM Link. The HSIM-A6DP adheres to the ATM Forum-approved LAN Emulation (LANE) standard, which defines how end users that rely on existing data communications technology and protocols can operate over an ATM network without penalty. - The HSIM-W6 and HSIM-W84 are Wide Area Networking (WAN) HSIMs, which can provide uplinks to WAN backbones and allow you to perform seamless LAN to WAN switching. The HSIM-W6 supports IP and IPX bridging or routing services, including IP RIP. Multiple WAN connectivity options are supported, including Sync, T1, E1, D&I, ISDN S/T, DDS, and HDSL interfaces, through the use of two configurable WAN Physical Interface Modules (WPIMs). Connectivity is available for Point to Point Protocol (PPP), as well as Frame Relay and Leased Lines. Each WPIM can act independently, allowing simultaneous communication, or configured to provide redundant channels if desired. The HSIM-W84 provides a fixed configuration of four RJ45 ports for four active T1 interfaces. Introduction NOTE The HSIM-W6 and HSIM-W84 are intelligent devices that are functionally identical to the CSX400. These HSIMs require their own IP addresses, and are managed as individual devices rather than as part of the device in which they are installed. Refer to the CSX200 and CSX400 User’s Guide for details on managing these devices using NetSight Element Manager. - The HSIM-W87 is a Wide Area Network (WAN) HSIM that provides LAN to WAN connectivity for any SmartSwitch that supports high-speed interface modules (HSIMs). The HSIM-W87 has a DS3 interface (T3), providing up to 28 separate DS1 connections (T1). Refer to Chapter 8, HSIM-W87 Configuration, for information on configuring an HSIM-W87. - The HSIM-G01 and HSIM-G09 are Gigabit Ethernet HSIMs, each of which provide a single Gigabit Ethernet connection that fully conforms to the IEEE P802.3z (D3.1) Draft Standard. The HSIM-G01 provides a single 1000Base-SX (short-wave) multimode fiber optic SC interface, allowing for link distances of up to 500 meters. The HSIM-G09 provides a single 1000Base-LX (long-wave) single mode/multimode fiber optic SC interface, allowing for link distances of up to 3 kilometers. - The HSIM-SSA710/20 are Wide Area Networking (WAN) HSIMs that support up to two ISDN PRI interfaces with up to 24 V.90 56K modem connections. The HSIM-SSA710/20 are intelligent devices that are managed as individual devices rather than as part of the device in which they are installed. Before you can access the device, you must add it to your central node database by inserting it in an existing List, Tree, or Map View, or by doing a Discover process (refer to your User’s Guide for more information). Once it has been added to your List, Tree, or Map view, you can access and manage the HSIM according to the information in Chapter 2, The Device View. • The 6E128-26 and 6E129-26 SmartSwitch modules each provide 24 fixed Ethernet fiber ports (multi-mode fiber on the 6E128; single-mode fiber on the 6E129) via ST connectors, plus two slots for FEPIMs. • The 6E138-25 and 6E139-25 SmartSwitch modules each provide 24 fixed Ethernet fiber ports (multi-mode fiber on the 6E138; single-mode fiber for the 6E139) via ST connectors, plus a single slot for an HSIM. • The 6E123-50 and 6E133-49 SmartSwitch modules are 48 port MicroLAN Ethernet modules (4 MicroLANs of 12 ports each, via four RJ21 Telco connectors). The 6E123-50 provides two FEPIM slots, while the 6E133-49 provides a single HSIM slot. • The 6E233-49 SmartSwitch module provides 48 Ethernet ports via four RJ21 interfaces and one HSIM slot which can accept any of the previously detailed HSIMs. • The 6G306-06 is a third-generation Matrix E7 and SmartSwitch 6000 module which provides six Gigabit Ethernet ports via flexible GPIM uplink modules. 1-3 Introduction • The 6H123-50 SmartSwitch module is a 48 port MicroLAN 10/100 Mbps Ethernet module (4 separately repeated MicroLANs of 12 ports each, via four RJ21 Telco connectors). The 6H123-50 also provides two FEPIM slots for uplinks. • The 6H133-37 SmartSwitch module is a 36 port MicroLAN 10/100 Mbps Ethernet module (3 separately repeated MicroLANs of 12 ports each, via RJ21 Telco connectors). A single HSIM slot is also provided. • The 6H122-08, 6H128-08, and 6H129-08 SmartSwitch modules each provide six fixed Fast Ethernet ports (via RJ45 on the 6H122, multi-mode fiber on the 6H128, and single-mode fiber on the 6H129), plus two slots for FEPIMs. • The 6H122-16 SmartSwitch module provides 16 fixed Fast Ethernet ports via RJ45 connectors, with no additional slots. • The 6H202-24 and 6H252-17 SmartSwitch modules are 10/100 Fast Ethernet modules. The 6H202-24 provides 24 ports via RJ45 connections. The 6H252-17 provides 16 ports via RJ45 connections as well as a VHSIM slot, which can accept any of the previously detailed HSIMs or the VHSIM-G6 Gigabit Ethernet High Speed Interface Module: - 1-4 The VHSIM-G6 is a Gigabit Ethernet module which provides two slots for GPIMs of various media to offer integrated Gigabit Ethernet uplink capability. The VHSIM-G6 can accept the GPIM-01, which offers one SC connector for MMF 1000Base SX Gigabit Ethernet connectivity, the GPIM-09, which offers one SC connector for MMF or SMF 1000Base LX connectivity, or the GPIM-04, which offers one ANSI Fibrechannel style-2 connector for 150 Ohm STP 1000Base CX connectivity. • The 6H203-24 and 6H253-13 SmartSwitch modules are 10/100 Fast Ethernet modules. The 6H203-24 provides 24 ports via dual RJ21 connectors. The 6H253-13 provides 12 10/100 Fast Ethernet ports via a single RJ21 connector and also features a VHSIM slot. • The 6H258-17 and 6H259-17 SmartSwitch modules are 16-port 100BaseFX (via MT-RJ connectors) modules, each with a single VHSIM slot. The 6H258-17 features 16 MMF ports, while the 6H259-17 features 16 SMF ports. • The 6H262-18 SmartSwitch module provides 16 10/100BaseTX ports (via RJ45 connectors) plus two GPIM slots for Gigabit Ethernet connectivity. • The 6H302-48 and 6H303-48 are third-generation 10/100 Fast Ethernet modules for the SmartSwitch 6000 and Matrix E7 chassis, providing 48 10/100 Fast Ethernet ports via RJ45 (6H302-48) and RJ21 (6H303-48) interfaces. • The 6H308-24 and 6H308-48 high-density switching modules are Enterasys' third-generation 100Base-FX switching solutions for the SmartSwitch 6000 and Matrix E7. The addition of 100Base-FX technology allows customers the ability to securely deploy fiber solutions to the desktop. • The 6H352-25 is a third generation 10/100 Gigabit Ethernet switching solution for the SmartSwitch 6000 and Matrix E7which delivers pinpoint control to critical network entry areas, without the expense and complexity of routed solutions. Introduction • The 6M146-04 SmartSwitch carrier module provides two FEPIM slots and two HSIM slots. Each of these SmartSwitch modules provide key mission-critical features such as redundant links for load sharing, alarm thresholding, broadcast storm control, port redirecting for traffic analysis, traffic priority configuration, and full error breakdown. Per-port RMON support is also provided. By default, these modules perform traditional switching (or bridging); each can also be configured to perform prestandard IEEE 802.1Q VLAN switching (a.k.a “port-based VLAN” switching) or Enterasys’ SecureFast switching (activated via Local Management). The 6C105 SmartSwitch 6000 and 6C107 Matrix E7 chassis themselves offer the following features: • Slots for up to 5 (for the 6C105) and 7 (for the 6C107) double-wide 2.4" interface modules. Each interface module is individually driven and managed by on-board processors, including an onboard SmartSwitch ASIC processor for switching, and Intel i960 Host microprocessors for dedicated module management. • A Frame Transfer Matrix (FTM) backplane design, that provides a separate independent backplane connection from each module in the chassis to every other module installed in the chassis. This allows a backplane bandwidth capacity of up to 3.2 Gbps. • Support for redundant, load-sharing power supplies to provide fault tolerance. • Enterasys’ LANVIEW Diagnostic LEDs for quick visual diagnosis of interface and device performance; a single removable fan tray; a 19" footprint for ease of installation in rack mounts; and front panel accessibility to all chassis components for easy maintenance. Using the SmartSwitch 6000 and Matrix E7 User’s Guide Each chapter in this guide describes one major functionality or a collection of several smaller functionalities of the SmartSwitch 6000 and Matrix E7 modules and the chassis in which they are installed. This guide contains information about software functions which are accessed directly from the device icon; additional management information about tools and features common to many devices can also be found in the Element Manager User’s Guide, the Element Manager Tools Guide, the Remote Administration Tools User’s Guide, the Alarm and Event Handling User’s Guide, and the RMON User’s Guide. Because the aforementioned modules share much of their functionality, they will be collectively referred to as the SmartSwitch 6000 and Matrix E7 modules. Where there are differences, however, each device will be named separately, as necessary. The information displayed in many of the windows will differ slightly depending upon which type of device is being managed; however, only a single window will be shown unless significant differences in functionality exist. Using the SmartSwitch 6000 and Matrix E7 User’s Guide 1-5 Introduction Chapter 1, Introduction, provides a list of related documentation and shows you how to contact the Enterasys Global Call Center. It also briefly describes the SmartSwitch 6000 and Matrix E7 modules and 6C105/6C107 chassis. Chapter 2, The Device View, describes the visual display of the SmartSwitch 6000 and Matrix E7 chassis as a whole and explains how to use the mouse within the Device View. It also details all chassis-level management functions, including Find Source Address, Port Redirect, Advanced Priority Configuration, and pre-standard 802.1Q port-based VLAN configuration at the chassis level. It also documents chassis-specific information, including MIB-II System Group information, chassis IP and MAC addresses, chassis clock information and uptime, power supply configuration and status, fan operational status, and backplane configuration. The chapter also details how each module is displayed in the chassis, and explains how to access management menus from the module display and change port status information. It also explains how to manage the individual module by monitoring the module’s system resources, finding a source address on the module, establishing module-level port priorities, setting up broadcast suppression on the device, and configuring the module’s front panel COM port and any attached Uninterruptable Power Supply (UPS). Chapter 3, Statistics, describes the two statistics views available at the interface level: MIB-II Interface statistics and RMON Ethernet statistics. Chapter 4, Alarm Configuration, provides instructions for using both the Basic and Advanced alarm applications to configure both alarms and the events that notify you that an alarm condition has occurred. The ability to automatically initiate a SET or a series of SETs in response to an alarm — functionality provided by Enterasys’ proprietary Actions MIB — is also described. Chapter 5, Managing Ethernet MicroLAN Modules, describes Ethernet repeater-specific functionality which you can use to monitor and manage Ethernet MicroLAN Modules (e.g., the 6E123-50 and 6E133-49 SmartSwitch modules). Chapter 6, FDDI Management, describes the Configuration, Connection Policy, Station List, Performance, FDDI Statistics, and Frame Translation selections available when an HSIM-F6 module is installed. Chapter 7, ATM Configuration, discusses the ATM Connections window which will appear if you have an HSIM-A6DP module installed in your device. Chapter 8, HSIM-W87 Configuration, describes the T3, T1, and IP Priority configuration windows which will be available when an HSIM-W87 is installed. We assume that you have a general working knowledge of Ethernet IEEE 802.3, Fast Ethernet, Gigabit Ethernet, FDDI, ATM, and WAN type data communication networks and their physical layer components, and that you are familiar with general bridging and switching concepts. 1-6 Using the SmartSwitch 6000 and Matrix E7 User’s Guide Introduction NOTE The Element Manager Chassis User’s Guide discusses how to initially configure the SmartSwitch 6000 or Matrix E7 chassis using the Chassis Setup window. It gives an overview of SmartSwitch 6000 and Matrix E7 management views and general module information, and discusses changing the current view as well as the default view. Related Manuals The SmartSwitch 6000 and Matrix E7 User’s Guide is only part of a complete document set designed to provide comprehensive information about the features available to you through NetSight Element Manager. Other guides which include important information related to managing the SmartSwitch 6000 and Matrix E7 include: Element Manager Chassis User’s Guide Element Manager User’s Guide Element Manager Tools Guide Element Manager Remote Administration Tools User’s Guide Element Manager Remote Monitoring (RMON) User’s Guide Element Manager Alarm and Event Handling User’s Guide Network Troubleshooting Guide Microsoft Corporation’s Microsoft Windows User’s Guide For more information about the capabilities of the SmartSwitch 6000 and Matrix E7, consult the appropriate hardware documentation. Getting Help This section describes different methods of getting help for questions or concerns you may have while using NetSight Element Manager. Using On-line Help You can use the Help buttons to obtain information specific to a particular window. When you click on a Help button, a window will appear which contains context-sensitive on-screen documentation that will assist you in the use of the windows and their associated command and menu options. Note that if a Help button is grayed out, on-line help has not yet been implemented for the associated window. Related Manuals 1-7 Introduction From the Help menu accessed from the Device View window menu bar, you can access on-line Help specific to the Device View window, as well as bring up the Chassis Manager window for reference. Refer to Chapter 2, The Device View, for information on the Device View and Chassis Manager windows. NOTE All of the online help windows use the standard Microsoft Windows help facility. If you are unfamiliar with this feature of Windows, you can select Help from the Windows Start menu, or Help —>How to Use Help from the primary NetSight Element Manager window, or consult your Microsoft Windows product User’s Guide. Accessing On-line Documentation The complete suite of documents available for NetSight Element Manager can be accessed via a menu option from the primary window menu bar: Help —> Online Documents. If you chose to install the documentation when you installed NetSight Element Manager, selecting this option will launch Adobe’s Acrobat Reader and a menu file which provides links to all other available documents. TIP If you have not yet installed the documentation, the Online Documents option will not be able to access the menu file. In order to activate this option, you must run the setup.exe again to install the documentation component. See your Installation Guide for details. Documentation Feedback 6HQG\RXUTXHVWLRQVFRPPHQWVDQGVXJJHVWLRQVUHJDUGLQJ1HW6LJKW GRFXPHQWDWLRQWR1HW6LJKW7HFKQLFDO&RPPXQLFDWLRQVYLDWKHIROORZLQJ HPDLODGGUHVV 1HWVLJKWBGRFV#HQWHUDV\VFRP Getting Technical Support Online Services on the World Wide Web 7RORFDWHSURGXFWVSHFLILFLQIRUPDWLRQUHIHUWRWKH(QWHUDV\V:HE3DJHDWWKH IROORZLQJDGGUHVV KWWSZZZHQWHUDV\VFRP Global Technical Assistance Center ,I\RXKDYHDGGLWLRQDOTXHVWLRQVFRQWDFWWKH*ORDEO7HFKQLFDO$VVLVWDQFH &HQWHUXVLQJRQHRIWKHVHPHWKRGV 1-8 Getting Help Introduction 7HOHSKRQHKRXUVDGD\GD\VD\HDU )D[ (OHFWURQLF0DLOVXSSRUW#HQWHUDV\VFRP 0DLOLQJ$GGUHVV (QWHUDV\V1HWZRUNV,QF 7HFKQLFDO6XSSRUW ,QGXVWULDO:D\ 5RFKHVWHU1+ )73 IWSFDEOHWURQFRP /RJLQDQRQ\PRXV 3DVVZRUG\RXUHPDLODGGUHVV Getting Help 1-9 Introduction 1-10 Getting Help Chapter 2 The Device View Information displayed in the Device View; the logical Device View; the Chassis Manager window; chassis management functions The Device View displays the current configuration of your SmartSwitch 6000 or Matrix E7 module via a graphical representation of the module’s front panel. The Device View serves as a single point of access to all other SmartSwitch 6000 and Matrix E7 windows and screens, which are discussed at length in the following chapters. To access the Device View, use one of the following options: NOTE On the 6C105, the instructions below bring you to the Chassis Setup, instead of the Management Selection window. There, you will create a .dmf file for the chassis, which enable you to access the 6C105’s Device View. Refer to the Element Manager Chassis User’s Guide for information on performing chassis setup. 1. In any map, list, or tree view, double-click on the SmartSwitch 6000 or Matrix E7 you wish to manage. The Management Selection window, Figure 2-1, will appear. or 1. In any map, list, or tree view, click the left mouse button once to select the device you wish to manage. 2. Select Manage —> Node from the primary window menu bar, or select the Manage Node toolbar button. The Management Selection window, Figure 2-1, will appear. or 1. In any map, list, or tree view, click the right mouse button once to select the device you wish to manage. 2. Select Manage from the resulting menu. The Management Selection window, Figure 2-1, will appear. 2-1 The Device View Figure 2-1. The Management Selection Window In the Management Selection window, click to select Device View, and click the OK button. The Device View window, Figure 2-2, will appear. Viewing Device Information The Device View (Figure 2-2) provides a graphic representation of the SmartSwitch 6000 and Matrix E7 chassis and the currently modeled SmartSwitch 6000 or Matrix E7 module, including a color-coded port display which immediately informs you of the current configuration and status of all the port interfaces on the module. Note that the module will appear in its corresponding physical slot in the SmartSwitch 6000 or Matrix E7. Slots are numbered from 1–5 (for the SmartSwitch 6000) or 1-7 (for the Matrix E7), from left to right in the chassis. NOTE The Device View for HSIMs that have their own IP address and are managed individually (the HSIM-W6, HSIM-W84, and HSIM-SSA710/20), does not show a representation of a five-slot SmartSwitch 6000 or seven-slot Matrix E7 chassis; it shows only a single-slot representation. The Device View also will provide you with environmental status information about the fan tray and power supplies installed in the chassis. 2-2 Viewing Device Information The Device View General device information Module information Chassis-specific information Figure 2-2. The Device View Window By clicking in designated areas of the chassis graphical display (as detailed later in this chapter), or by using the menu bar at the top of the Device View window, you can access all of the menus that lead to more detailed windows. TIP When you move the mouse cursor over a management “hot spot,” the cursor icon will change into a hand symbol to indicate that clicking in the current location will bring up a management option. NOTE Note that up to 22 ports can be displayed simultaneously on a module. If a module has a higher port density than 22 ports, arrows will appear at the top and bottom of the port stack so that you can scroll through the remaining ports. Viewing Device Information 2-3 The Device View General Device Information In addition to the main interface display, the Device View window provides the following device information: IP The Device View window title displays the device’s IP (Internet Protocol) Address; this will be the SmartSwitch 6000 or Matrix E7 module IP address used to define the device icon. The IP address is assigned to the SmartSwitch 6000 or Matrix E7 module via the Device Configuration portion of Local Management; it cannot be changed via NetSight Element Manager. Note that although each interface in the SmartSwitch 6000 or Matrix E7 module has its own MAC, or physical, address, only a single IP address is assigned to the device. Connection Status This color-coded area indicates the current state of communication between NetSight Element Manager and the SmartSwitch 6000 or Matrix E7 module. If you click this icon, you can restart the device. • Green indicates the SmartSwitch 6000 or Matrix E7 module is responding to device polls (valid connection). • Magenta indicates that the SmartSwitch 6000 or Matrix E7 module is in a temporary stand-by mode while it responds to a physical change in the hub (such as when a module is inserted). Note that module and port menus are inactive during this stand-by state. • Blue indicates an unknown contact status; polling has not yet been established with the SmartSwitch 6000 or Matrix E7 module. • Red indicates the SmartSwitch 6000 or Matrix E7 module is not responding to device polls (device is off line, or device polling has failed across the network for some other reason). Chassis Type The model of the chassis — 6C105 or 6C107 —þin which the monitored SmartSwitch 6000 or Matrix E7 module is installed. Location A descriptive field you can use to identify where the chassis is physically located. You can edit this field through the device’s System Group window; refer to the Generic SNMP User’s Guide for further details. UpTime The amount of time, in a days hh/mm/ss format, that the SmartSwitch 6000 or Matrix E7 module has been running since the last start-up. Note that when distributed chassis management is available, this field will indicate the time that the longest active module has been running since start-up. 2-4 Viewing Device Information The Device View Port Status Indicates the port status display selection currently in effect. The default port status view is bridge status; if you have not changed the port status selection since launching the Device View, this field will display Default. For more information about changing the port status display, see Port Status Displays, on page 2-14. MAC Displays the manufacturer-set MAC, or physical, address associated with the IP address used to define the device icon. This will be the MAC address assigned to the first interface detected on the SmartSwitch 6000 or Matrix E7 module (although each interface in the SmartSwitch 6000 or Matrix E7 module has its own MAC address). MAC addresses are factory-set and cannot be altered. Boot Prom The revision of BOOT PROM installed in the SmartSwitch 6000 or Matrix E7 module. Firmware The revision of device firmware stored in the SmartSwitch 6000 or Matrix E7 module’s FLASH PROMs. Time The current time, in a 24-hour hh:mm:ss format, set in the SmartSwitch 6000 or Matrix E7 module’s internal clock. Date The current date, in an mm/dd/yyyy format, set in the SmartSwitch 6000 or Matrix E7 module’s internal clock. NOTES In accordance with Year 2000 compliance requirements, NetSight Element Manager now displays and allows you to set all dates with four-digit year values. You can set the date and time by using the Edit Device Date and Edit Device Time options on the Device menu; see Setting the Device Date and Time, on page 2-103, for details. 6C105/6C107 Chassis-specific Information The Device View provides the following information about the 6C105 or 6C107 chassis in which the SmartSwitch 6000 or Matrix E7 module is installed. There are four color-coded fields which provide status information for the operation of the power supplies and fan tray installed in the 6C105/6C107 chassis. Power Redundancy The 6C105 and 6C107 support two power supply modules. Each supports a separate AC input connector, so that two separate power sources can be used for the chassis. Additionally, with two power supplies installed, the total load presented by the Viewing Device Information 2-5 The Device View 6C105/6C107 and its installed modules is split 50/50 between the supplies (+/- 5%). The Power Redundancy field displays whether or not the chassis is currently configured for load sharing and power redundancy. Possible values are: • Available (Green) — Two 6C205-01 or 6C207-01 power supply modules are installed in the 6C105/6C107 chassis. • Not Available (Yellow) — Only a single 6C205-01 or 6C207-01 power supply module is installed in the 6C105/6C107 chassis. Note that when only a single power supply module is installed, it must always be in power slot 1 (PS1). PS #1/#2 Status Indicates the state of any power supplies installed in the 6C105/6C107 Chassis. Possible states returned are: • Not Available (Yellow) — No response has been returned from the device regarding the power supplies. • Normal (Green) — A power supply is installed and operating in the associated power slot. • Fault (Red) — The power supply in the associated power slot is not operational. • Not Installed (Blue) — The indicated power slot is not occupied by a power supply. Fan Tray Status The 6C105/6C107 supports a single, removable fan tray that has four fans. The tray is hot swappable, so it can be removed without powering down the chassis. This field indicates the status of the 6C105/6C107 Fan Tray: 2-6 • Not Available (Yellow) — No response has been returned regarding the fan tray. • Normal (Green) — A fan tray is installed and operational. • Fault (Red) — One or more fans in the tray have failed. • Not Installed (Blue) — The fan tray slot is not occupied. The chassis is in danger of overheating if it continues to run without the fan tray installed. Viewing Device Information The Device View Menu Structure By clicking on various areas of the Device View display, you can access menus with device-, module-, and port-level options, as well as utility applications which apply to the device. The following illustration displays the menu structure and indicates how to use the mouse to access the various menus. NOTE By default, the SmartSwitch 6000 or Matrix E7 module performs traditional switching (or bridging). Depending on the version of firmware you have installed, the module can also be configured to perform pre-standard 802.1Q VLAN switching or Enterasys SecureFast Switching. (Check your firmware release notes to see if your version of firmware supports these features). For SmartSwitch 6000 and Matrix E7 modules that support 802.1Q VLANs or SecureFast Switching, the toggle from traditional bridging to 802.1Q or SecureFast Switching is performed via Local Management. Refer to your Local Management documentation for details. When using NetSight Element Manager to manage a device configured for SecureFast Switching, no bridging-related windows or port status display options will be available. All other management options will be available. Viewing Device Information 2-7 The Device View For the Device menu: • The FDDI Statistics option will appear if you have an HSIM-F6 module installed. • The ATM Connections option will appear if you have an HSIM-A6DP module installed. • The VLAN option will appear if your device has been configured to operate in 802.1Q mode. • The Priority Configuration option will appear if your device supports 802.1P Dynamic Multicast Filtering/Priority Queuing. • The UPS option will only appear if your COM port has been configured for use with an Uninterruptable Power Supply. No bridge-related options appear in any menus if the device is running in SecureFast Switching mode. Figure 2-3. Device View Menu Structure 2-8 Viewing Device Information The Device View The Device Menu From the Device menu at the Device View menu bar, you can access the following selections: • Device Type displays a window containing a description of the device being modeled. See Device Type, on page 2-26, for details. • Device Find Source Address enables you to determine which interface a specified MAC address is communicating through by searching the 802.1d bridge Filtering database. Ethernet MicroLAN modules (e.g., the 6E123-50 or 6E144-49) will also search the repeater Source Address Table (SAT). If the specified MAC address is located, a list of interface(s) through which the given address is communicating will be displayed. • Edit Device Time and Edit Device Date allow you to set the SmartSwitch 6000 or Matrix E7 module’s internal clock; see Setting the Device Date and Time, on page 2-103 • System Group allows you to manage the SmartSwitch 6000 or Matrix E7 via SNMP MIB II. Refer to the Generic SNMP User’s Guide for further information. • I/F Summary lets you view statistics (displayed both graphically and numerically) for the traffic processed by each network interface on your device. See Viewing I/F Summary Information, on page 2-27, for details. • 802.1Q VLAN appears in the Device menu if your module is configured to operate in 802.1Q mode. The windows launched via the VLAN option allow you to configure and operate port-based VLANs on the module. See 802.1Q VLANs, on page 2-70, for details. • ATM Connections appears in the Device menu if you have an HSIM-A6DP installed in your module. This launches a window which lets you configure Permanent Virtual Circuits (PVCs) for the module. See Chapter 7, ATM Configuration, for more information. • Port Redirect launches a window that allows you to mirror — or redirect — traffic received or transmitted at one port on your module to one or more other ports, so that you can unobtrusively attach network analyzers to ascertain problems or trends in your data flow. For more information about using the Port Redirect window, see Redirecting Traffic, on page 2-54. • System Resources displays information about the processor used on the monitored SmartSwitch 6000 or Matrix E7 module, as well as the amount of installed and currently available FLASH memory, DRAM, and NVRAM. See The System Resources Window, on page 2-66. • Priority Configuration allows you to establish priority packet forwarding for the SmartSwitch 6000 or Matrix E7 module. For more information, see Priority Configuration, on page 2-56. Viewing Device Information 2-9 The Device View NOTE The Priority Configuration menu option will only appear in the Device menu for modules that respond to any of NetSight Element Manager’s queries to the following OIDs: ctPriorityExtPortStatus, ctPriorityExtMaxNumMACEntries, or ctPriorityExtNumPktTypeEntries. If your module’s firmware does not respond to these queries, contact the Enterasys Global Call Center for firmware upgrade information. • Com Port Configuration allows you to configure the settings of the COM ports on the SmartSwitch 6000 or Matrix E7 module; see Configuring the COM Port, on page 2-36, for details. • Broadcast Suppression allows you to set a threshold on the number of broadcast packets issued from each port on the SmartSwitch 6000 or Matrix E7 module when it is operating in traditional switch (bridge) mode. See Broadcast Suppression, on page 2-64. • FDDI Statistics option will appear in the Device menu if you have an HSIM-F6 installed in your module. This launches a window which displays traffic-related statistics for each Station Management (SMT) entity present on an installed HSIM-F6. See Chapter 6, FDDI Management, for more information. • UPS brings up a window that allows you to configure an Uninterruptable Power Supply attached to your SmartSwitch 6000 or Matrix E7 Module’s COM port. See Using an Uninterruptable Power Supply (UPS), on page 2-51, for details. • Exit closes the Device View window. The View Menu The View menu lets you switch the front panel display between three graphical representations of the device: • The Logical view provides the logical front panel display of the SmartSwitch 6000 or Matrix E7 module and its interfaces. • The BackPlane Config view displays the backplane connections between the SmartSwitch 6000 or Matrix E7 module and other modules installed in the 6C105/6C107 chassis. • Refresh updates the display. The Port Status Menu The Port Status menu allows you to select the status information that will be displayed in the port text boxes in the Device View: 2-10 • Status allows you to select one of four status type displays: Bridge, Bridge Mapping, Admin, or Operator. • Load will display the portion of network load processed per polling interval by each interface, expressed as a percentage of its theoretical maximum load (10, 100, 155.5, 800, or 1000 Mbps). Viewing Device Information The Device View • Errors allows you to display the number of errors detected by each interface, since the last reset, expressed as a percentage of the total number of valid packets processed by the interface. • I/F Mapping will display the interface ifIndex associated with each port on your SmartSwitch 6000 or Matrix E7 module. • I/F Speed will display the port’s bandwidth: 10M (megabits) for Ethernet; 100M for Fast Ethernet; 155.5M for ATM; and 800M for the backplane interfaces. • I/F Type will display the port type of each port on your SmartSwitch 6000 or Matrix E7 module, e.g., Eth (ethernet-csmacd), ATM, or FDDI. • VLAN Mapping will appear if your device has been configured to operate in 802.1Q mode. It displays the VLAN ID number associated with each port on your SmartSwitch 6000 or Matrix E7 module. For SmartSwitch 6000 and Matrix E7 Ethernet MicroLAN modules, the Port Status menu will contain the following options: • Load will display the portion of network load processed by each port as a percentage of the theoretical maximum load of the connected network segment (10, 100, 155.5, 800, or 1000 Mbps). • Port Assignment will display each port’s repeater channel assignment (A-H). • Status allows you to select one of three status type displays: Admin/Link, Admin, or Link. • Errors, and Frame Size allow you to display the percentage per port of the specific Error or Frame Size you select. For more information on the port display options available via this menu, see Selecting a Port Status View, on page 2-14. The Repeater Menu If you are modeling a SmartSwitch 6000 or Matrix E7 Ethernet MicroLAN module, the Repeater menu will appear, offering the following options for each repeater segment (A-H) on the device: • • • • • • • Statistics Timer Statistics Performance Graph Source Address Type Lock/Unlock Ports Alarm Limits Trap Selection Refer to Chapter 5, Managing Ethernet MicroLAN Modules, for information on these menu selections. Viewing Device Information 2-11 The Device View The FDDI Menu If your SmartSwitch 6000 or Matrix E7 has an installed HSIM-F6, the FDDI menu will appear on the Device View menu bar, with the following options: • • • • • Configuration Connection Policy Station List Performance Frame Translation Refer to Chapter 6, FDDI Management, for information on these menu selections. The Utilities Menu The Utilities menu provides the following selections • MIB Tools -- provides direct access to the SmartSwitch 6000 or Matrix E7 module’s MIB information; refer to the Element Manager Tools Guide for more information. • Launch WebView opens up the Web View for the device, if the device supports it. • RMON -- a remote monitoring feature that is supported on a per-port basis when at least one Ethernet or Fast Ethernet module is installed in the chassis; refer to the RMON User’s Guide for more information. These selections are also available from the Tools menu at the top of the primary NetSight Element Manager window. The Help Menu The Help Menu has the following three selections: • MIBs Supported brings up the Chassis Manager window, described later in this chapter. • Chassis Manager Help brings up a help window with information specifically related to using the Chassis Manager and Device View windows. • About Chassis Manager brings up a version window for the Chassis Manager application in use. The Module Menu The Module menu for the SmartSwitch 6000 or Matrix E7 module provides mostly bridging-related selections, many of which are also available from the Bridge Status window: 2-12 • Module Information opens a Module Information window that provides firmware and manufacturing information which may be useful when troubleshooting any problems that you are having with the module. For more information, refer to The Module Information Window, on page 2-24. • Module Type brings up a window containing a description of the selected module; see Viewing Hardware Types, on page 2-25. Viewing Device Information The Device View • Bridge Status opens a window that provides an overview of bridging information for each port, and allows you to access all other bridge-related options. Refer to the Bridging chapter in the Element Manager Tools Guide for more information. • Broadcast Suppression allows you to set a threshold on the number of broadcast packets issued from each port on the SmartSwitch 6000 or Matrix E7 module when it is operating in traditional switch (bridge) mode. • HSIM W87 Config (T1) allows you to configure T1 connections for an installed HSIM-W87; see Chapter 8, HSIM-W87 Configuration, for details. • IP Priority Config allows you to configure priority transmission for up to 16 IP addresses for an installed HSIM-W87; see Chapter 8, HSIM-W87 Configuration, for details. • Performance Graph appears if there are between one and eight bridge ports, they are all running at the same speed, and the speed is less than 100 Mb/s. The bridge performance graph visually displays the combined performance of all bridging interfaces installed in the SmartSwitch 6000 or Matrix E7 module. Refer to the Bridging chapter in the Element Manager Tools Guide for more information. • Spanning Tree allows you to set bridge parameters when it is operating using the Spanning Tree Algorithm (STA) — the method that bridges use to decide the controlling (root) bridge when two or more bridges are in parallel. Refer to the Bridging chapter in the Element Manager Tools Guide for more information. • SmartTrunk invokes the SmartTrunk Configuration and Status Screen, which enables you to group interfaces logically to achieve greater bandwidth between devices, if both devices support the SmartTrunk feature. There is no limit to the number of ports that can be included in a single “trunk,” nor is there a limit to the number of trunked “instances” that can be supported. Refer to the Bridging chapter in the Element Manager Tools Guide for more information. • Filtering Database lets you see and configure the contents of the 802.1d bridge Static and Filtering Databases. Refer to the Bridging chapter in the Element Manager Tools Guide for more information. • Duplex Modes allows you to set Duplex Mode operation for standard Ethernet interfaces. • Enable/Disable Bridge enables or disables bridging across every interface installed in the SmartSwitch 6000 or Matrix E7 module. The Port Menus Each port menu offers the following selections: • Description displays a text description of the selected port. See Viewing Hardware Types, on page 2-25, for details. • Performance Graph appears if the port’s speed is less than 100 mb/s. The resulting bridge port performance windows visually display bridging performance at the selected interface. Refer to the Bridging chapter in the Element Manager Tools Guide for more information. Viewing Device Information 2-13 The Device View • Source Addressing allows you to view the source MAC addresses communicating through the currently selected interface. • HSIM W87 Config (T3) allows you to configure a T3 interface for an installed HSIM-W87; see Chapter 8, HSIM-W87 Configuration, for details. • I/F Statistics launches a window that displays MIB-II interface statistics for the selected interface. • Configuration allows you to configure Ethernet ports for Standard or Full Duplex Mode, or configure operational parameters for Fast Ethernet ports, depending on the type of interface selected. • Alarm Configuration launches the RMON-based Basic and Advanced Alarm applications; see Chapter 4, Alarm Configuration, for details. Note that this selection is available for all bridge port interfaces — even those (like ATM) that do not specifically support RMON functionality — as long as at least one Ethernet or Fast Ethernet port is on the module. • Statistics launches the highest level of statistics currently available for the selected port. For standard Ethernet and Fast Ethernet ports, RMON statistics will be displayed if the RMON Default MIB component is active; if it has been disabled, MIB-II interface statistics will display. See Chapter 3, Statistics, for more information. • Enable/Disable Port, which activates or disables bridging for the selected port, respectively; refer to the Bridging chapter in the Element Manager Tools Guide, and Enabling and Disabling Ports, on page 2-104, for more information. Port Status Displays When you open the Logical View of the chassis, each port will display its current bridging state (defined below), with the exception of SmartSwitch 6000 or Matrix E7 Ethernet MicroLAN ports, which will display their Admin/Link status (also defined below) by default; to change this status display, select one of the options on the Port Status menu, as described in the following sections. Selecting a Port Status View To change the status view of your ports: 1. Click on Port Status on the menu bar at the top of the Device View window; a menu will appear. 2. Select the status information you want to display. The port text boxes will display the appropriate status information. Port status view options are: 2-14 Viewing Device Information The Device View Status You can view four port status categories, as follows: • • • • Bridge — FWD, DIS, LRN, LIS, BLK, or BRK Bridge Mapping — the instance of the physical interface associated with a bridge port Admin — ON or OFF Operator — ON or OFF If you have selected the Bridge status mode, a port is considered: • FWD (Forwarding) if the port is on-line and ready to forward packets across the SmartSwitch 6000 or Matrix E7 from one network segment to another. This is also the default display for ports which are administratively enabled but not connected. In pre-5.1.x firmware, the default state of a port not in use is “forwarding,” whereas in the 5.1.x firmware, the default is “blocking” (BLK). • DIS (Disabled) if bridging at the port has been disabled by management; no traffic can be received or forwarded on this port, including configuration information for the bridged topology. • LIS (Listening) if the port is not adding information to the filtering database. It is monitoring Bridge Protocol Data Unit (BPDU) traffic while preparing to move to the forwarding state. • LRN (Learning) if the Forwarding database is being created, or the Spanning Tree Algorithm is being executed because of a network topology change. The port is monitoring network traffic, and learning network addresses. • BLK (Blocking) if the port is on-line, but filtering traffic from going across the SmartSwitch 6000 or Matrix E7 from one network segment to another. Bridge topology information will be forwarded by the port. In the 5.1.x firmware, the default state of a port not in use is “blocking,” whereas in previous firmware versions, the default is “forwarding” (FWD). • BRK (Broken) if the physical interface has malfunctioned. If you have selected the Bridge Mapping status mode, the port display will alter to show the dot1dBasePortIfIndex, which is the value of the instance of the interface index (the MIB II ifIndex) that corresponds to each bridge/switch port on the device. For a SmartSwitch 6000 or Matrix E7 module, the dot1dBasePortIfIndex of the bridge interfaces will map directly to the ifIndex. If you have selected the Admin status mode, a port is considered: • ON if the port is enabled by management. • OFF if it has not been enabled or if it has been disabled through management action. The Admin state reflects the state requested by management; depending on the circumstances, this may or may not match the current Operator status, described below. Viewing Device Information 2-15 The Device View If you have selected the Operator status mode, a port is considered: • ON if the port is currently forwarding packets. • OFF if the port is not currently forwarding packets. Note that the Operator status provides the actual status of the port; depending on the circumstances, this may or may not reflect the Admin state currently requested by management. For example, ports which are administratively ON but not yet connected would display an Operator status of OFF, since no packets are being forwarded. Load If you choose Load, the interface text boxes will display the percentage of network load processed by each port during the last polling interval. This percentage reflects the network load generated per polling interval by devices connected to the port compared to the theoretical maximum load (10, 100, 155.5, 800, or 1000 Mbps) of the connected network. Errors If you choose the Errors mode, the interface boxes will display the percentage of the total number of valid packets processed by each port during the last polling interval that were error packets. This percentage reflects the number of errors generated during the last polling interval by devices connected to that port compared to the total number of valid packets processed by the port. NOTE The polling interval is set using the Device Management page of the Options window, accessed via the Tools—>Options selection from the main menu bar. Refer to the Element Manager User’s Guide for full information on setting node polling intervals. I/F Mapping If you choose the I/F Mapping mode, the interface boxes will display the interface number (ifIndex) associated with each port on the SmartSwitch 6000 or Matrix E7 module. I/F Speed If you choose the I/F Speed mode, the interface boxes will display the bandwidth of each individual port on the SmartSwitch 6000 or Matrix E7 module: 10M (megabits) for standard Ethernet; 100M for Fast Ethernet, 155.5 M for ATM, 800M for a backplane interface, and 1.00 G for Gigabit Ethernet. I/F Type If you choose the I/F Type mode, the interface boxes will display the network type supported by each interface on the SmartSwitch 6000 or Matrix E7 module, e.g., Eth (ethernet-csmacd), ATM, or FDDI. Note that there is no type distinction between standard Ethernet, Fast Ethernet, and Gigabit Ethernet. Port status view options for a SmartSwitch 6000 or Matrix E7 Ethernet MicroLAN module are: 2-16 Viewing Device Information The Device View Load If you choose Load, the port text boxes will display the percentage of network load processed by each port during the last polling interval. This percentage reflects the network load generated by devices connected to the port compared to the theoretical maximum load (10, 100, 155.5, 800, or 1000 Mbps). Port Assignment If you choose Port Assignment, each port’s status box will display a letter which designates its current repeater channel assignment (A-H). Status You can view three status categories for your ports which reflect six possible Admin/Link, Admin, or Link Status conditions: • • • Admin/Link — ON, OFF, SEG (segmented), or NLK (not linked) Admin — ON or OFF Link — LNK (link), NLK (not linked), or N/A (not available) If you have selected the Admin/Link status mode, a port is considered: • ON if the port is enabled and has a valid link. • OFF if it has not been enabled or if it has been disabled through management action. • SEG (segmented) if the port has been enabled by management and has a valid connection, but has been segmented by the repeater because 33 consecutive collisions have occurred on the attached segment, or the collision detector was on for more than 2.4 µs. • NLK (Not Linked) when the port is on, but there is no physical link to the port. This field is a combination of two status conditions: No Link and Port Administrative Status On. If you have selected the Admin status mode, a port is considered: • ON if the port is enabled. • OFF if the port has been disabled by management. These conditions do not reflect link status. Viewing Device Information 2-17 The Device View If you have selected the Link status mode, a port is considered: NOTE • LNK (Linked) when a valid link has been established between the port and the device at the other end of the segment. • NLK (Not Linked) when the port is on, but there is no physical link to the port or the device at the other end of the port’s segment is down. • N/A (not available) when NetSight Element Manager cannot determine the link status for the port. Because BNC thin coax and AUI ports do not support the link feature, the displayed Admin/Link, Admin, and Link status conditions will not always follow the pattern described above: Under Admin/Link status mode, BNC ports will display as ON if there is a valid connection and the port has been enabled; OFF if the port has been disabled; and SEG if the port has experienced 33 consecutive collisions or if there is no cable attached. An AUI port will display as ON if the port has been enabled (regardless of whether or not there is a valid connection), OFF if the port has been disabled, and SEG if the port has detected 33 consecutive collisions. Note that the Admin/Link status displays for BNC and AUI ports can be misleading in terms of troubleshooting; be sure to keep in mind that a BNC port displaying as segmented may only have had its cable disconnected, and an AUI port that appears to be on and linked may not have any cable attached. Under Admin status mode, AUI and BNC ports will display as ON if the port has been enabled, and OFF if it has been disabled; as with other port types, these ON and OFF conditions indicate nothing about link status. Under Link status mode, AUI and BNC port display boxes will display N/A, indicating that NetSight Element Manager is unable to determine their link status. Errors or Frame Size If you choose the Errors or Frame Size modes, additional menus offer the following options for each mode: 2-18 Errors Total Errors, Collisions, Alignment, CRC, Runts, Giants, or OOW Collisions Frame Size Runts, 64-127, 128-255, 256-511, 512-1023, 1024-1518, or Giants Viewing Device Information The Device View The port status boxes will display the percentage for each active port that represents what portion of that port’s total traffic is of the specific type (Errors or Frame Sizes) that you selected. Select one of the Errors options to see what percentage of the total packets received by each active port during the last polling interval was of the error type you selected. This percentage reflects the number of errors generated by devices connected to that port in relation to the total number of packets processed by the port (errors [errors + packets]). Choose the Frame Size option to check on the sizes, in bytes, of frames passing through your ports. The percentages are calculated just like the Errors selection described above: the number given represents the number of packets of the selected size generated by devices connected to that port in relation to the total number of packets processed. Remember, these percentages are calculated based on the numbers of packets processed during one polling cycle. Port Status Color Codes Three of the Port Status display options — Bridge, Admin, and Operator — incorporate their own color coding schemes: for the Bridge option, green = FWD, blue = DIS, magenta = LIS or LRN, orange = BLK, and red = BRK; for Admin and Operator, green = ON, red = OFF, and blue = N/A (not available). For all other Port Status selections — Bridge Mapping, Load, Errors, I/F Mapping, I/F Speed, and I/F Type — color codes will continue to reflect the most recently selected mode which incorporates its own color coding scheme. For a SmartSwitch 6000 or Matrix E7 Ethernet MicroLAN module, three of the port status display options — Port Assignment, Port Type, and Status — incorporate their own color coding schemes. For any of the Status display options — Admin/Link, Admin, or Link — green = ON/LNK, yellow = SEG/NLK, red = OFF, and blue = N/A (not available). For the Port Assignment display option, Channel A = magenta, Channel B = olive, Channel C = cyan, Channel D = yellow, Channel E = orange, Channel F = white, Channel G = green, Channel H = hot pink. For the Port Type display option, station ports will display as yellow; trunk ports will display as green. For all other MicroLAN Port Status selections — Load, Errors, and Frame Size — color codes will continue to reflect the most recently selected mode which incorporates its own color coding scheme. Viewing Device Information 2-19 The Device View The Chassis Backplane View By default, the Device View window displays the Logical View of the 6C105/6C107 Chassis and an installed SmartSwitch 6000 or Matrix E7 module. The Logical View provides port status information and access to device-, module-, and port-level menus, as described above. In addition to the default Logical View, the View menu available via the menu bar at the top of the Device View window allows you to display views of the chassis’ backplane: • The Chassis Backplane View indicates the five (for the 6C105) or seven (for the 6C107) point-to-point backplane connections between the monitored SmartSwitch 6000 or Matrix E7 module and other modules in the chassis. The Backplane View also lets you disable those backplane connections. The Chassis Backplane View The Chassis Backplane View, Figure 2-4, indicates the operational status of the five point-to-point backplane connections between the monitored SmartSwitch 6000 or Matrix E7 module and other modules in the chassis slots. It also lets you enable or disable the backplane connections to other modules in the chassis. To access the Chassis Backplane View: 1. In the Device View, click on View in the menu bar to access the View menu. 2. Click on BackPlane Config. The Chassis Backplane View, Figure 2-4, will appear. 2-20 Viewing Device Information The Device View From the Backplane View you can display the device interfaces with respect to their bridging status or their MIB II Interface status. The currently selected Port Display Form is shown in the label above the interfaces. Below the Port Display Form label, the interfaces appear according to the currently selected Display Form. In the Bridge display form, you can access management options for the individual interfaces. To change the display form between Bridge and Interface, click on the label and select the desired display form from the resulting menu. Bridge is the default display form. When the display form is in Bridge mode, clicking on an interface results in a menu of options applicable to the selected backplane interface. The Performance Graph option appears only if the port’s speed is less than 100 mb/s. For information on enabling or disabling the interface, see Enabling or Disabling a Backplane Interface, on page 2-23. For details on the remaining menu options, refer to their entries in The Port Menus, on page 2-13. Figure 2-4. The Backplane View Viewing Device Information 2-21 The Device View SmartSwitch 6000 chassis: The backplane connections are indexed 1–5, where 1 indicates the connection to first slot in the chassis and 5 indicates the connection to the last slot. Matrix E7 chassis: The backplane connections are indexed 1–7, where 1 indicates the connection to first slot in the chassis and 7 indicates the connection to the last slot. Second generation boards used in the Matrix E7 show only 5 slots. NOTE For Matrix E7 users: Modules for the Matrix E7 (6C107) chassis are third generation (6x3xx) boards. Third generation boards are fully supported in any of the 6C107 chassis’ seven slots. Second generation boards (6x2xx SmartSwitch modules) are fully supported in slots 1-5 in the 6C107 chassis. A second generation board in slot 6 or 7 of the 6C107 will act as a standalone module. Backplane View Bridge Display Form When the Backplane View display form is in the default Bridge mode, each connection is represented by a color-coded text field as follows: FWD (Green) The interface is on-line and ready to forward packets across the SmartSwitch 6000 or Matrix E7 from one module to another. DIS (Blue) Bridging at the interface has been disabled by management; no traffic can be received or forwarded on this interface, including configuration information for the bridged topology. LIS (Magenta) The interface is not adding information to the filtering database. It is monitoring Bridge Protocol Data Unit (BPDU) traffic while preparing to move to the forwarding state. LRN (Magenta) The Forwarding database is being created, or the Spanning Tree Algorithm is being executed because of a network topology change. The interface is monitoring network traffic, and learning network addresses. BLK (Orange) The interface is on-line, but filtering traffic from going across the SmartSwitch 6000 or Matrix E7 from one module to another. Bridge topology information will be forwarded by the interface. BRK (Red) The interface has malfunctioned. Backplane View Interface Display Form When the Backplane View is in Interface mode, each connection is represented by a color-coded text field that indicates a combination of the interface’s Administrative status, Operational status, and Link status. The following status conditions are supported: UNK (Gray) 2-22 NetSight Element Manager cannot determine the backplane interface’s Administrative, Operational, or Link status. Viewing Device Information The Device View ON (Green) The backplane interface is operational (up) and administratively enabled. Link status is linked, or not applicable to the interface. ON (Yellow) The backplane interface is operational (up) and administratively enabled; however, the interface link status is Not Linked (NLK). OFF (Blue) The interface is not operational, and prior to going down it was also administratively disabled. OFF (Red) The interface is not operational, but prior to going down it was in an administratively enabled state. TEST (Magenta) The interface is in some test operational state. --- (Gray) The backplane interface is that associated with the slot in which the currently monitored SmartSwitch 6000 or Matrix E7 module is installed. Enabling or Disabling a Backplane Interface You can enable or disable a backplane interface as follows: 1. With the display form in Bridge mode, click on the backplane interface which you wish to enable or disable. A menu will appear. 2. Select Enable or Disable, as desired. TIP The SmartSwitch 6000 and Matrix E7 firmware will not allow you to disable the operational status of an interface supporting your active network connection. This applies to both backplane and front panel interfaces. If you attempt to disable the backplane interface to the module that is supporting your active network connection, you will receive a SET FAILED message. The Chassis Manager Window Like most networking devices, Cabletron and Enterasys devices draw their functionality from a collection of proprietary MIBs and IETF RFCs. In addition, certain Enterasys intelligent devices — like the SmartSwitch 6000 or Matrix E7 module — organize their MIB data into a series of “components.” A MIB component is a logical grouping of MIB data, and each group controls a defined set of objects. For example, SmartSwitch 6000 or Matrix E7 module bridging information is organized into its own component; Local Management (LIM) and RMON are also contained in separate components. Note, too, that there is no one-to-one correspondence between MIBs and MIB components; a single MIB component might contain objects from several different proprietary MIBs and RFCs. The Chassis Manager window, Figure 2-5, is a read-only window that displays the MIBs and the MIB components — and, therefore, the functionality — supported by the currently monitored device. Viewing Device Information 2-23 The Device View To view the Chassis Manager window: 1. Click on Help on the far right of the menu bar at the top of the Device View window. 2. Click on MIBs Supported. The MIBs which provide the SmartSwitch 6000 and Matrix E7’s functionality — both proprietary MIBs and MIB Components are listed here; remember, there’s no one-to-one correspondence between MIBs and MIB Figure 2-5. The Chassis Manager Window NOTE The Chassis Manager window will also appear briefly when the Device View window is launched. The Module Information Window The Module Information window (Figure 2-6) displays system information, as well as data provided by the PIC chip (Product Information Chip). The PIC chip, which is updated each time a module is redesigned, maintains the manufacturing data for the module and stores certain information such as the MAC addresses of various components. Note that some devices will not return all the data displayed in the Module Information window; these fields will remain blank. To view the Module Information window: 1. Click on the desired Module Index. The Module menu will appear. 2-24 Viewing Device Information The Device View 2. Click on Module Information. The Module Information window, Figure 2-6, will appear. Figure 2-6. The Module Information Window Firmware Version The system description of the module, including its firmware revision number. Boot Prom The revision of boot PROM firmware in the module, including major version number and minor revision number. The boot PROM provides power-on diagnostics and download capability which enables the module’s system image (which provides its runtime functionality) to be downloaded over the network. Top Level Serial Number The top level serial number of the module associated with this PIC chip which provides encoded manufacturing date, location, serial number, and top level revision number which can be used for troubleshooting information. Base MAC Address The base MAC address (in Ethernet format) assigned to the module. SMB 1 Prom Version This field is not applicable to the SmartSwitch 6000 or Matrix E7 module. It will be blank. Viewing Hardware Types In addition to the graphical displays described above, menu options available at the device and module levels provide specific information about the physical characteristics of the SmartSwitch 6000 or Matrix E7 chassis and its installed modules. Viewing Device Information 2-25 The Device View Device Type Choosing the Device Type option on the Device menu brings up a window that describes the management device being modeled. Figure 2-7. Example Device Type Windows Module Type From the Module menus on the Device View window, you can view a description of the Module types installed in your chassis. To view a Module type: 1. Click on the desired Module Index. The Module menu will appear. 2. Click on Module Type. A Module Type text box (similar to the example shown in Figure 2-8) will appear, describing the module type. Figure 2-8. Sample Module Type Text Box Interface Description Choosing the Description option from the Port menu brings up a window that describes the selected interface. 2-26 Viewing Device Information The Device View Figure 2-9. Sample Interface Description Windows Viewing I/F Summary Information The I/F Summary menu option available from the Device menu lets you view statistics for the traffic processed by each network interface on your device. The window also provides access to a detailed statistics window that breaks down Transmit and Receive traffic for each interface. To access the I/F Summary window: 1. From the Device View, click on the Device option from the menu bar. 2. Click again to select I/F Summary. The I/F Summary window, Figure 2-10, will appear. Figure 2-10. The I/F Summary Window Viewing Device Information 2-27 The Device View The I/F Summary window provides a variety of descriptive information about each interface on your device, as well as statistics which display each interface’s performance. The following descriptive information is provided for each interface: Index The index value assigned to each interface on the device. Type The type of the interface, distinguished by the physical/link protocol(s) running immediately below the network layer. Possible values are fddi (for an installed HSIM-F6), ethernet-csmacd (for standard, Fast Ethernet, and Gigabit Ethernet front panel interfaces, as well as the backplane interfaces to the chassis), atm (for an installed HSIM-A6), and Software LoopBack for the i960 Host Data port. Description A text description of the interface: Enterasys Enet or Ethernet Front (for the standard Ethernet front panel interfaces), Enterasys Fast or Fast Ethernet (for front panel Fast Ethernet interfaces), Enterasys Back or FTM Backplane (for the backplane interfaces to the chassis), Host or Host Data Port for the on-board i960 Host interface, and ATM, Enterasys ATM, FDDI, or Enterasys FDDI for an installed HSIM. Physical Status Displays the current physical status — or operational state — of the interface: Online or Offline. Logical Status Displays the current logical status — or administrative state — of the interface: Up or Down. Interface Performance Statistics The statistical values (and, where available, the accompanying bar graphs) to the right of the interface description fields provide a quick summary of interface performance. You can select the statistical value you want to display and the units in which you want those values displayed by using the two menu fields directly above the interface display area, as follows: 1. In the right-most menu field, click on the down arrow and select the unit in which you wish to display the selected statistic: Load, Raw Counts, or Rate. 2. Once you have selected the base unit, click on the down arrow in the left-most field to specify the statistic you’d like to display. Note that the options available from this menu will vary depending on the base unit you have selected. After you select a new display mode, the statistics will refresh to reflect the current choice, as described below. 2-28 Viewing Device Information The Device View Raw Counts The total count of network traffic received or transmitted on the indicated interface since device counters were last reset. Raw counts are provided for the following parameters: In Octets Octets received on the interface, including framing characters. In Packets Packets (both unicast and non-unicast) received by the device interface and delivered to a higher-layer protocol. In Discards Packets received by the device interface that were discarded even though no errors prevented them from being delivered to a higher layer protocol (e.g., to free up buffer space in the device). In Errors Packets received by the device interface that contained errors that prevented them from being delivered to a higher-layer protocol. In Unknown Packets received by the device interface that were discarded because of an unknown or unsupported protocol. Out Octets Octets transmitted by the interface, including framing characters. Out Packets Packets transmitted, at the request of a higher level protocol, by the device interface to a subnetwork address (both unicast and non-unicast). Out Discards Outbound packets that were discarded by the device interface even though no errors were detected that would prevent them from being transmitted. A possible reason for discard would be to free up buffer space in the device. Out Errors Outbound packets that could not be transmitted by the device interface because they contained errors. Load The number of bytes processed by the indicated interface during the last poll interval in comparison to the theoretical maximum load for that interface type (10 Mbps for standard Ethernet; 100 Mbps for Fast Ethernet or FDDI; 155.5 Mbps for ATM; 800 Mbps for a backplane port; 1000 Mbps for Gigabit Ethernet). Load is further defined by the following parameters: In Octets The number of bytes received by this interface, expressed as a percentage of the theoretical maximum load. Out Octets The number of bytes transmitted by this interface, expressed as a percentage of the theoretical maximum load. Viewing Device Information 2-29 The Device View Rate The count for the selected statistic during the last poll interval. The available parameters are the same as those provided for Raw Counts. Refer to the Raw Counts section, page 2-29, for a complete description of each parameter. Viewing Interface Detail The Interface Statistics window (Figure 2-11) provides detailed MIB-II interface statistical information — including counts for both transmit and receive packets, and error and buffering information — for each individual port interface. Color-coded pie charts also let you graphically view statistics for both received and transmitted Unicast, Multicast, Discarded, and Error packets. To open the Interface Statistics window: 1. In the I/F Summary window, click to select the interface for which you’d like to view more detailed statistics. 2. Click on Detail. The appropriate I/F Statistics window, Figure 2-11, will appear. Figure 2-11. Detail Interface Statistics 2-30 Viewing Device Information The Device View TIP You can also access this information via the I/F Statistics option available on the individual port menus. Three informational fields appear in the upper portion of the window: Description Displays the interface description for the currently selected interface (e.g., Enterasys Enet Port, Enterasys Fast Enet Port, FDDI, ATM, or Enterasys Backplane Port). Address Displays the MAC (physical) address of the selected interface. Type Displays the interface type of the selected port: ethernet-csmacd, fddi, or atm. The lower portion of the window provides the following transmit and receive statistics; note that the first four statistics are also graphically displayed in the pie charts. Unicast Displays the number of packets transmitted to or received from this interface that had a single, unique destination address. These statistics are displayed in the pie chart, color-coded green. Non-Unicast Displays the number of packets transmitted to or received from this interface that had a destination address that is recognized by more than one device on the network segment. The multicast field includes a count of broadcast packets — those that are recognized by all devices on a segment. These statistics are displayed in the pie chart, color-coded dark blue. Discarded Displays the number of packets which were discarded even though they contained no errors that would prevent transmission. Good packets are typically discarded to free up buffer space when the network becomes very busy; if this is occurring routinely, it usually means that network traffic is overwhelming the device. To solve this problem, you may need to re-configure your bridging parameters, or perhaps re-configure your network to add additional bridges or switches. Consult the Enterasys Network Troubleshooting Guide for more information. These statistics are displayed in the pie chart, color-coded magenta. Error Displays the number of packets received or transmitted that contained errors. These statistics are displayed in the pie chart, color-coded red. Viewing Device Information 2-31 The Device View Unknown Protocol (Received only) Displays the number of packets received which were discarded because they were created under an unknown or unsupported protocol. Packets Received (Received only) Displays the number of packets received by the selected interface. Transmit Queue Size (Transmit only) Displays the number of packets currently queued for transmission from this interface. The amount of device memory devoted to buffer space, and the traffic level on the target network, determine how large the output packet queue can grow before the SmartSwitch 6000 or Matrix E7 module will begin to discard packets. Packets Transmitted (Transmit only) Displays the number of packets transmitted by this interface. Making Sense of Detail Statistics The statistics available in this window can give you an idea of how an interface is performing; by using the statistics in a few simple calculations, it’s also possible to get a sense of an interface’s activity level: To calculate the percentage of input errors: Received Errors /Packets Received To calculate the percentage of output errors: Transmitted Errors /Packets Transmitted To calculate the total number of inbound and outbound discards: Received Discards + Transmitted Discards To calculate the percentage of inbound packets that were discarded: Received Discards /Packets Received To calculate the percentage of outbound packets that were discarded: Transmit Discards /Packets Transmitted Using the Device Find Source Address Option To detect the port through which a given MAC address is communicating, use the Device Find Source Address window. 2-32 Viewing Device Information The Device View When you select the Device Find Source Address option, the device’s 802.1d Filtering database is searched for the specified MAC address. If it is found, the Component field will display the value “Bridge” indicating that the address was found on a bridging interface, and the Port Instance field will display the index number assigned to the bridge port on which the address was located. NOTE You may receive an error message stating “Can’t Display Source Address” if a Port Instance of “0” or “0.0” is reported. This value indicates that the MAC address is communicating through the backplane instead of through a front panel interface. To open the Device Find Source Address window: 1. Click on Device in the Device View menu bar. 2. Click on Device Find Source Address. The Device Find Source Address window, as shown in Figure 2-12, will appear. Figure 2-12. Device Find Source Address Window The Device Find Source Address window displays the following information: Component Displays the type of interface through which the specified MAC address is communicating. This field will report Bridge. Port Instance Displays the bridge port index number on which the specified MAC address was found. Viewing Device Information 2-33 The Device View To use the Device Find Source Address window: 1. In the Address Mode field, select the format of the Source Address you wish to find, either MAC or Canonical. 2. In the Enter Address text box, enter the Source Address you wish to find in the appropriate XX-XX-XX-XX-XX-XX format. NOTE If you enter the MAC format of a specified address, and then click on Canonical, NetSight Element Manager will do the address conversion for you. The same is also true if you enter the Canonical format of a specified address and then select MAC. 3. Click on the Find It! button. A “Processing Request” message will appear in the status bar at the bottom of the window. If the specified MAC address is located, a list of the interface(s) through which the given address is communicating will appear in the list box. A status message at the bottom of the window will display the number of interfaces through which the given MAC address is communicating. If the specified MAC address cannot be found, a “Source Address not found” message will appear. NOTE If the MAC address is entered in an incorrect format, an “Invalid MAC Address. Enter Valid MAC Address” message will appear. Enter the address in the correct XX-XX-XX-XX-XX-XX hexadecimal format. Using Device Find Source Address on Ethernet MicroLAN Modules When you select the Device Find Source Address option on an Ethernet MicroLAN module (e.g., the 6E123-50 or 6E133-49), a search is made of both the Source Address Table (SAT) and the 802.1d Filtering database to discover through which interface(s) a specified source MAC address is communicating. If the MAC address is found, the interface types “Bridge” and “Enet #” will display in the Component field with their associated port index number displayed in the Port Instance field. NOTE You may receive an error message stating “Can’t Display Source Address” if a Port Instance of “0” or “0.0” is reported while using the Device Find Source Address feature. This value indicates that the MAC address is communicating through the backplane instead of through a front panel interface. To open the Device Find Source Address window: 2-34 Viewing Device Information The Device View 1. Click on Device in the Device View menu bar. 2. Click to select Device Find Source Address. The Device Find Source Address window, as shown in Figure 2-12, will appear. Figure 2-13. Device Find Source Address Window The Device Find Source Address window displays the following information: Component Displays the type of interface through which the specified MAC address is communicating. This field will display Bridge and Enet #, indicating that the specified MAC address was found on a bridging interface and on an Ethernet repeater channel. Port Instance Displays the port index number associated with the interface on which the specified MAC address was found. For an address found on a bridging interface, this field displays the bridge interface index number on which the specified MAC address was found. For an address found on a repeater port, this field displays the board (port group) number and the port index number on which the specified MAC address was found. The board and port index numbers are separated by a period; for example, a Port Instance of 1.2 refers to board (port group) 1 and port number 2. To use the Device Find Source Address window: 1. In the Address Mode field, select the format of the Source Address you wish to find, either MAC or Canonical. 2. In the Enter Address text box, enter the Source Address you wish to find in the appropriate XX-XX-XX-XX-XX-XX format. Viewing Device Information 2-35 The Device View NOTE If you enter the MAC format of a specified address, and then click on Canonical, NetSight Element Manager will do the address conversion for you. The same is also true if you enter the Canonical format of a specified address and then select MAC. 3. Click on the Find It! button. A “Processing Request” message will appear in the status bar at the bottom of the window. If the specified MAC address is located, a list of the interface(s) through which the given address is communicating will appear in the list box. A status message at the bottom of the window will display the number of interfaces through which the given MAC address is communicating. If the specified MAC address cannot be found, a “Source Address not found” message will appear. NOTE If the MAC address is entered in an incorrect format, an “Invalid MAC Address. Enter Valid MAC Address” message will appear. Enter the address in the correct XX-XX-XX-XX-XX-XX hexadecimal format. Managing the Module In addition to the performance and configuration information described in the preceding sections, the Device View also provides you with the tools you need to configure your SmartSwitch 6000 or Matrix E7 module and keep it operating properly. Hub management functions include setting operating parameters for Ethernet, FDDI, Fast Ethernet, Gigabit Ethernet and COM ports; managing an attached UPS; redirecting traffic from one module interface to another; setting port priority parameters; configuring transmission thresholds for broadcast packets; viewing and configuring system resources; setting device date and time; and enabling and disabling bridging at specific port interfaces. Configuring Ports The Configuration options available for FDDI, Ethernet, Fast Ethernet, Gigabit Ethernet and COM ports allow you to configure operating parameters specific to each port type: for FDDI and standard Ethernet ports, you can set the Duplex Mode; for Fast Ethernet ports on first generation modules, you can set a variety of duplex mode and negotiation parameters; for Fast Ethernet and Gigabit Ethernet ports on second generation modules you can set speed, duplex mode, and flow control parameters; and for COM ports, you can select the operation you wish the port to perform, and set any associated speed parameters. FDDI, Ethernet, Fast Ethernet and Gigabit Ethernet Port Configuration windows are 2-36 Managing the Module The Device View available from the Device View Port menus (except on Ethernet MicroLAN modules where they are available from the Bridge Port menu); the COM Port option is available from the Device menu. Note that no configuration option currently exists for ATM ports. Configuring Standard Ethernet and FDDI Ports The Port Configuration window available for both standard Ethernet and FDDI ports allows you to set an interface to either Standard or Full Duplex Mode. Full Duplex mode effectively doubles the available wire speed by allowing the interface to both receive and transmit simultaneously. This window will also display the mode currently in effect on the selected interface. To access the Port Configuration window: 1. From the Device View, click to select the port you wish to configure. The Port Menu will display. 2. Click on Configuration. The Port Configuration window, Figure 2-14, will appear. To access the Port Configuration window on SmartSwitch 6000 or Matrix E7 MicroLAN modules (e.g., 6E123-50 and 6E133-49): 1. In the Device View, click on Device in the menu bar to access the Device menu. 2. Click on Bridge Status. In the resulting window, click on the Bridge Port button to access the Bridge Port menu. 3. Click on Configuration. The Port Configuration window, Figure 2-14, will appear. Figure 2-14. The Port Configuration Window Managing the Module 2-37 The Device View TIP WARNING If you select the Configuration option available for a Fast Ethernet interface, an entirely different window will appear; see Configuring Fast Ethernet Ports on First Generation Modules, on page 2-39, or Configuring Ethernet Ports on Second Generation Modules, page 2-44, for information on configuring these ports. For standard Ethernet interfaces, Full Duplex should only be enabled on an interface that has a connection to a single destination address at the other end of the connection (i.e., it is not a segment with an attached repeater cascading the connection to multiple destination addresses). Full Duplex mode disables the collision detection circuitry at the interface, so that both Transmit and Receive wires can be used simultaneously. With a single destination address at the other end of the connection (for example, if the connection was to a full duplex interface on another switching module, or if a single file server was connected to the full duplex switch port), this essentially doubles the available bandwidth from 10 Mbit/sec to 20 Mbit/sec. Note that the interface at the other end of the connection must also have Full Duplex enabled at the attached interface. Full Duplex mode must be disabled if the interface is communicating with multiple destinations simultaneously (i.e., if a repeater is cascaded from the interface), since Ethernet relies on Collision Sense for proper operation. Similarly, an FDDI Full Duplex connection must also only be run point-to-point between two supporting FDDI interfaces (e.g., another HSIM-F6), since the dual bandwidth is attained by running data on both primary and secondary paths simultaneously. Since Full Duplex overrides standard FDDI protocol (and eliminates ring redundancy), it will not operate in a “ring” configuration, but only as a point-to-point high speed data trunk between hubs. Note that you must use Local Management to configure your HSIM-F6 for Full Duplex operation prior to making physical connections. Refer to your Local Management Guide for more information. Use the options in this window to select the desired mode: Standard Mode In Standard Mode, an interface can only either transmit or receive at any given time, and must wait for one activity to be completed before switching to the next activity (receive or transmit). In this mode, standard wire speeds (10 Mbps for Ethernet, 100 Mbps for FDDI) are available. Full Duplex In Full Duplex Mode, an interface can both receive and transmit packets at the same time, effectively doubling the available wire speed to 20 Mbps (for Ethernet) or 200 Mbps (for FDDI). Be sure to click on the Apply button to set your changes; note that the interface’s current mode can be determined by the field selected in the window. 2-38 Managing the Module The Device View Configuring Fast Ethernet Ports on First Generation Modules The Fast Ethernet Configuration window available for Fast Ethernet ports on first generation modules (e.g., 6H122-xx and 6H128-08) allows you to both view and set those ports’ available modes. All 100Base-TX Fast Ethernet ports can be configured to operate in either standard Ethernet (10 Mbps) or Fast Ethernet (100 Mbps) mode, and in each mode can be configured to operate in Full Duplex, effectively doubling the available wire speed (from 10 to 20 Mbps in standard Ethernet mode, or from 100 to 200 Mbps in Fast Ethernet mode); 100Base-FX (fiber) ports can be configured to operate in their standard 100 Mbps mode, or in Full Duplex mode. This window also displays the mode currently in effect on the selected interface, and provides some information (where it is available) about the interface’s link partner. To access the Fast Ethernet Configuration Window: 1. From the Device View, click to select the port you wish to configure; the Port Menu will display. 2. Click on Configuration. The Fast Ethernet Configuration window, Figure 2-15, will appear. To access the Fast Ethernet Configuration window on SmartSwitch 6000 or Matrix E7 MicroLAN modules (e.g., 6H123-50): 1. In the Device View, click on Device in the menu bar to access the Device menu. 2. Click on Bridge Status. In the resulting window click on the Bridge Port button to access the Bridge Port menu. 3. Click on Configuration. The Fast Ethernet Configuration window, Figure 2-14, will appear. Managing the Module 2-39 The Device View Figure 2-15. The Fast Ethernet Port Configuration Window NOTE TIP Auto-Negotiation is not supported by the FE-100FX Fast Ethernet port interface module. If you launch the window for a port module slot which has no FE module installed, the Port Type will display as Unknown, the Link State will display No Link, and the rest of the fields will be blank and/or grayed out. If you select the Configuration option available for a standard Ethernet or FDDI interface or for an Ethernet port on a second generation module, an entirely different window will appear; see Configuring Standard Ethernet and FDDI Ports, page 2-37, or Configuring Ethernet Ports on Second Generation Modules, page 2-44, for information on configuring these ports. From this window you can manually set the operational mode of the port, or — for 100Base-TX interfaces — set the port to Auto-Negotiation so that the appropriate operational mode can be determined automatically. The mode you set will determine the speed of the port and whether it uses Full Duplex or Standard Mode bridging. 2-40 Managing the Module The Device View The window displays the following information about the selected Fast Ethernet port: Port Type Displays the port’s type: 100Base-TX RJ-45 (for built-in Fast Ethernet ports and the FE-100TX Fast Ethernet port module), 100Base-FX MMF SC Connector (for the FE-100FX Fast Ethernet port module), or Unknown (for a port slot with no module installed). Link State Displays the current connection status of the selected port: Link or No Link. Current Operational Mode Indicates which of the available operational modes is currently in effect: 10Base-T, 10Base-T Full Duplex, 100Base-TX, 100Base-TX Full Duplex, 100Base-FX, or 100Base-FX Full Duplex. If the port is still initializing, not linked, or if there is no port module installed in the slot, this field will remain blank. Desired Operational Mode Displays the operational mode that you have selected for this port, and allows you to change that selection. The following operational modes are available for each port: ! CAUTION 100Base-TX Auto-Negotiation, 10Base-T, 10BASE-T Full Duplex, 100Base-TX, and 100Base-TX Full Duplex. 100Base-FX 100Base-FX and 100Base-FX Full Duplex If you choose to select a specific mode of operation (rather than auto-negotiation), you should be sure that the link partner supports the same mode. Otherwise, no link will be achieved. If you select a Full Duplex mode and the link partner supports the same wire speed but not Full Duplex, a link will be achieved, but it will be unstable and will behave erratically. If you select Auto-Negotiation, the local node will try to match the mode of the link partner, even if the link partner is not set to auto-negotiate, and even if the local node must use a mode which it is not currently advertising. Note that if Auto-Negotiation is the selected mode, the Current Operational Mode field will indicate which mode was selected by the link partner. See Setting the Desired Operational Mode, on page 2-42, for more information. Advertised Abilities For 100Base-TX ports which have been configured to operate in Auto-Negotiation mode, this field allows you to select which of the operational modes available to the port can be selected by the negotiating link partners. Managing the Module 2-41 The Device View During Auto-Negotiation, each of the link partners will advertise all selected modes in descending bandwidth order: 100Base-TX Full Duplex, 100Base-TX, 10Base-T Full Duplex, and 10Base-T. Of the selected abilities, the highest mode mutually available will automatically be used. If there is no mode mutually advertised, no link will be achieved. If you have selected a specific operational mode for your 100Base-TX port, the Advertised Abilities do not apply; the selected Advertised Abilities also do not restrict the local node’s ability to set up a link with a partner who is not currently Auto-Negotiating. Auto-Negotiation is not currently supported for 100Base-FX ports. NOTE Remote Capabilities When the local node is set to Auto-Negotiation, this field will display the advertised abilities of the remote link — even if the remote link is not currently set to auto-negotiate. Possible values for this field are: • 100Base-TX Full Duplex • 100Base-TX • 10Base-T Full Duplex • 10Base-T • Link Partner does not support Auto-Negotiation — Auto-Negotiation is either not supported by or is not currently selected on the remote port. • Unknown — the link partner’s capabilities could not be determined. When the local node is not set to Auto-Negotiation, this field will be grayed out, even if the link partner is set to Auto-Negotiation and is advertising abilities. NOTE If both link partners are set to Auto-Negotiation, but there is no mutually-advertised operational mode, no link will be achieved, and both nodes may display the message “Link Partner does not support Auto-Negotiation.” To resolve this situation, be sure both link partners advertise all their abilities, or be sure they advertise at least one mutually-available mode. Setting the Desired Operational Mode For any 100Base-TX port, you can specifically choose any one of the four available operational modes, or you can select Auto-Negotiation mode, which allows the port to negotiate with its link partner to find the highest mutually available bandwidth. If you select Auto-Negotiation mode, you must also choose which of the port’s bandwidth capabilities you wish to advertise to the link partner. 2-42 Managing the Module The Device View TIP If you select Auto-Negotiation at both ends of a link, be sure at least one mutually-advertised operational mode is available. For a 100Base-FX port, the selection process is somewhat simpler; Auto-Negotiation for these ports is not supported at this time, so you need only choose between 100Base-FX standard mode and 100Base-FX Full Duplex. However, you must still be sure that both link partners are set to the same operational mode, or the link will be unstable. To set your desired operational mode: 1. Click on the Desired Operational Mode list box to display the menu of available options; click to select the operational mode you wish to set. For 100Base-TX ports, the available options are: Auto Negotiation — the operational mode will be dynamically set based on the modes selected in the Advertised Abilities field (where both link partners are auto-negotiating) and the speeds and modes supported by the attached device 10Base-T — 10 Mbps connection, Standard Mode 10Base-T Full Duplex — 10 Mbps connection, Duplex Mode 100Base-TX — 100 Mbps connection, Standard Mode 100Base-TX Full Duplex — 100 Mbps connection, Duplex Mode For 100Base-FX ports, options are: 100Base-FX — 100 Mbps connection, Standard Mode 100Base-FX Full Duplex — 100 Mbps connection, Duplex Mode 2. If you have selected Auto-Negotiation (for 100Base-TX ports only), use the Advertised Abilities field to select the operational capabilities you wish to advertise to the port’s link partner. If both link partners will be auto-negotiating, be sure there is at least one mutually-advertised operational mode, or no link will be achieved. TIP The selected Advertised Abilities only come into play when both link partners are auto-negotiating; if only one link partner is set to auto-negotiate, that node will establish a link at whatever mode its partner is set to, even if that mode is not currently being advertised. Managing the Module 2-43 The Device View 3. Click on the Apply button to save your changes. Click on the Refresh button to display the new settings. Note that it may take a few minutes for mode changes to be completely initialized, particularly if the link partners must negotiate or re-negotiate the mode; you may need to refresh the window a few times before current operational data is displayed. Configuring Ethernet Ports on Second Generation Modules The Ethernet Configuration window available for Fast Ethernet and Gigabit Ethernet ports on second generation modules (e.g., 6E233-49 and 6H258-17) allows you to both view and set those ports’ available speed, modes, and flow control. All second generation modules support the ctEthernetParameters MIB. All Ethernet ports that return at least one instance for a query of the ctEtherSupportedDuplex OID will use the Ethernet Configuration window as shown in Figure 2-16. All 100Base-TX Fast Ethernet ports can be configured to operate in either standard Ethernet (10 Mbps) or Fast Ethernet (100 Mbps) mode, and each mode can be configured to operate in Full Duplex effectively doubling the available wire speed (from 10 to 20 Mbps in standard Ethernet mode, or from 100 to 200 Mbps in Fast Ethernet mode). 100Base-FX (fiber) ports can be configured to operate in their standard 100 Mbps mode, or in Full Duplex mode. 1000Base-SX/LX/CX Gigabit Ethernet ports are always configured to operate in 1000 Mbps, Full Duplex mode. This window displays the mode currently in effect on the selected interface, and provides some information (where it is available) about the interface’s link partner. To access the Ethernet Configuration Window: 1. From the Device View, click to select the port you wish to configure; the Port Menu will display. 2. Click on Configuration. The Ethernet Configuration window, Figure 2-15, will appear. 2-44 Managing the Module The Device View Figure 2-16. The Ethernet Configuration Window TIP If you select the Configuration option available for a standard Ethernet or FDDI interface or for a Fast Ethernet port on a first generation module, an entirely different window will appear; see Configuring Standard Ethernet and FDDI Ports, page 2-37, or Configuring Fast Ethernet Ports on First Generation Modules, page 2-39, for information on configuring these ports. From this window you can manually set the operational mode of the port, or — for 100Base-TX and 1000Base-SX/LX/CX interfaces — set the port to Auto Negotiate so that the appropriate operational mode can be determined automatically. The mode you set will determine the port’s speed, duplex mode, and flow control. The window displays the following information about the selected Ethernet port: Port Type Displays the port’s type: 100Base-TX RJ-45or RJ71 (for built-in Fast Ethernet ports and the FE-100TX Fast Ethernet port module), 100Base-FX MMF SC Connector (for the Managing the Module 2-45 The Device View FE-100FX Fast Ethernet port module), 1000Base-SX/LX/CX (for the VHSIM-G6 Gigabit Ethernet port module), or Unknown (for a port slot with no module installed). Link State Displays the current connection status of the selected port: Link or No Link. Remote Auto Signal Indicates whether the operating mode at the remote end of the link is set to Auto Negotiate. Auto Negotiate Config Indicates whether Auto Negotiate signalling is in progress or has completed. Possible values for this field are: configuring, complete, disabled, parallel detect failed, or other. Auto Negotiate Mode Use this field to enable or disable Auto Negotiate for the port. If Auto Negotiate is disabled, the port will use the speed, duplex mode, and flow control settings specified in the Operational Mode fields. Note that 100-BaseFX ports do not support Auto Negotiation; they must use the control settings specified in the Operational Mode fields. Operational Mode Fields If the port is not set to Auto Negotiate then the settings in the Operational Mode fields are used. ! CAUTION If you choose to select a specific mode of operation (rather than auto negotiation), you should be sure that the link partner supports the same mode. Otherwise, no link will be achieved. For example, if you select Full Duplex mode and the link partner supports the same wire speed but not Full Duplex, a link will be achieved, but it will be unstable and will behave erratically. If you select Auto-Negotiation, the local node will try to match the mode of the link partner, even if the link partner is not set to auto-negotiate, and even if the local node must use a mode which it is not currently advertising. The Current Operational Mode settings indicate which of the available operational modes is currently in effect. If Auto Negotiate is the selected mode, the Current Operational Mode fields will indicate which mode was selected by the link partner. The Desired Operational Mode settings display the operational mode that is currently selected for this port, and allows you to change the selection. The following operational modes can be specified: Speed This field specifies a port speed of 10MB, 100MB, or 1000MB. 2-46 Managing the Module The Device View Duplex This field specifies Half Duplex or Full Duplex mode for the port. Flow Control Flow control allows Ethernet devices to notify attached devices that congestion is occurring and that the sending device should stop transmitting until the congestion can be cleared. There are two commonly used methods of flow control: Frame-based (operates on Full Duplex links) and Backpressure (operates on Half Duplex links). Ports set to Full Duplex mode have frame-based flow control, using pause control frames. Frame-based flow control options are: Symmetric The port is able to both receive and transmit pause control frames. Asymmetric RX This option appears only for Gigabit Ethernet ports. The port will receive pause control frames, but will not transmit its own. Asymmetric TX This option appears only for Gigabit Ethernet ports. The port is capable of sending pause control frames, but will not acknowledge received pause control frames. Disabled Disables flow control on the port. Auto Negotiate Ports configured to operate in auto negotiation mode will only use pause control frames if the negotiation process determines that the link partner supports them. Both ends of the link must support auto negotiation and a common mode of operation. Ports set to Half Duplex mode use Backpressure flow control. Backpressure flow control simply asserts the carrier sense signal out the port causing the device transmitting to detect a collision, stop transmitting data, and send the jam signal. Backpressure flow control options are enabled or disabled. Setting the Desired Operational Mode For any 100Base-TX port, you can configure operational modes, or you can select Auto Negotiate mode, which allows the port to negotiate with its link partner to find the highest mutually available bandwidth and flow control. If you select Auto Negotiate mode, you must also choose which of the port’s bandwidth and flow control capabilities you wish to advertise to the link partner (refer to Auto Negotiation Technologies, page 2-48). 100Base-FX ports do not support auto negotiation for bandwidth or flow control capability, so you must choose between 100Base-FX Half Duplex and 100Base-FX Full Duplex mode, and set the flow control option. However, you must still be sure that both link partners are set to the same operational mode, or the link will be unstable. For 1000Base-SX/LX/CX ports the speed and duplex modes are always configured at 1000MB Full Duplex. However, you can select Auto Negotiate mode, which allows the port to negotiate with its link partner to find the highest mutually available bandwidth and flow control. If you select Auto Negotiate mode, you must also choose which of the port’s bandwidth and flow control capabilities you wish to advertise to the link partner (refer to Auto Negotiation Technologies, page 2-48). Managing the Module 2-47 The Device View To set your desired operational mode: 1. Click on the Speed, Duplex, or Flow Control list box to display the menu of available options; click to select the operational mode you wish to set. NOTE If the port you are configuring does not support Flow Control, the Current Mode field will display “not supported” and the Desired Mode list box will be disabled. 2. Click on the Apply button to save your changes. Auto Negotiation Technologies For ports which have been configured to operate in Auto Negotiate mode, this list box allows you to select which of the operational modes available to the port will be advertised to the negotiating link partner. During Auto Negotiation, each of the link partners will advertise all selected modes. Of the selected modes, the highest mode mutually available will automatically be used. If there is no mode mutually advertised, no link will be achieved. TIP If you select Auto-Negotiation at both ends of a link, be sure at least one mutually-advertised operational mode is available. If you have manually configured specific operational modes for your 100Base-TX port or if you are configuring a 100Base-FX port, the Auto Negotiation Technologies list box does not apply. The Auto Negotiation Technologies list box has the following column headings: Advertised This column specifies whether the operational mode listed in the far right column of the list box will be advertised to the link partner. Only those operational modes supported by the local port (those with a “yes” listed in the Local column) can be advertised. Valid values are Enabled (the mode is supported and will be advertised), Disabled (the mode is supported but will not be advertised), and “---” (the mode is not supported). Local Indicates whether the operational mode listed in the far right column of the list box is supported by the local port. Remote Indicates whether the operational mode listed in the far right column of the list box is supported by the remote port. 2-48 Managing the Module The Device View Auto Negotiate Technology This column lists possible operational modes. Setting Advertised Abilities for Auto Negotiation You can determine which operational mode supported by the local port will be advertised to the negotiating link partner. Of the advertised modes, the highest mode mutually available will automatically be used. To advertise an operational mode: 1. In the list box, click on the operational mode of choice. If the Advertised column had a value of Enabled, it will change to Disabled; a value of Disabled will change to Enabled. If the Advertised column has a value of “---”, then the value is not changed. 2. Click on the Apply button to save your changes. Click on the Refresh button to display the new settings. Note that it may take a few minutes for mode changes to be completely initialized, particularly if the link partners must negotiate or re-negotiate the mode; you may need to refresh the window a few times before current operational data is displayed. Configuring the COM Port You can use the COM Port Configuration window (Figure 2-17) to specify the functions that will be performed by the RS232 COM port on the front panel of the monitored SmartSwitch 6000 or Matrix E7 module. To do so: 1. Click on Device in the Device View menu bar to display the Device menu. 2. Click on COM Port Configuration and then select Port 1. The COM Port Configuration window, Figure 2-17, will appear. Figure 2-17. The COM Port Configuration Window Managing the Module 2-49 The Device View You can use the COM Port Configuration window to set the following operating parameters: COM Port Admin Use this field to administratively enable or disable the COM port. COM Port Function Use this field to select the function for which you wish to use the COM port: NOTE LM Local Management: select this option if you wish to connect a terminal to the COM port from which to run Local Management. UPS Select this option if you wish to connect an uninterruptable power supply (UPS) to the COM Port. Note that if you select this option, an additional option — UPS — will appear on the Device menu when you exit and re-enter device management; use the resulting window to configure specific UPS settings. SLIP Select this option to use the COM port as a SLIP connection for out-of-band SNMP management via direct connection to a serial port on your network management workstation. Note that when you configure the port as a SLIP connection, you must select the desired baud rate in the Speed Selection field described below. PPP Select this option to use the COM port as a PPP connection for out-of-band SNMP management via direct connection to a serial port on your network management workstation. Note that when you configure the port as a PPP connection, you must select the desired baud rate in the Speed Selection field, page 2-50. Current SmartSwitch 6000 or Matrix E7 firmware versions support only Local Management and UPS via the COM ports; future versions will add SLIP and PPP support. You will receive a SET failed message if you attempt to configure the COM port for SLIP or PPP support. Speed Selection If you have configured the selected port as a SLIP or PPP connection, you must select the appropriate baud rate: 2400, 4800, 9600, or 19,200. Note that this field will default to Auto-Baud and become unselectable when the COM Port Function is set to LM or UPS. TIP 2-50 If the COM port you wish to configure is currently set to LM or UPS, the Speed Selection field will be unavailable until the COM Port Function is set to SLIP or PPP and that change is applied. Once available, the Speed Selection field will default to the last known speed setting; use the down arrow to change this setting if necessary, then click the Apply button again to complete the configuration. Managing the Module The Device View To change the configuration of the selected COM port: 1. Click on the arrow to the right of each field. 2. Drag down to select the desired setting, then release. 3. Click on the Apply button to save your changes. Using an Uninterruptable Power Supply (UPS) Your SmartSwitch 6000 or Matrix E7 supports the use of a UPS (uninterruptable power supply) through its COM port (if configured through local management). (For more information on the use of a UPS with the SmartSwitch 6000 or Matrix E7, consult the SmartSwitch 6000 or Matrix E7 Installation Manual that was included when you purchased the unit.) You can view or change the status of the UPS connected to your SmartSwitch 6000 or Matrix E7 at the UPS window. Please note that the UPS window will only be active if you currently have a UPS attached to your SmartSwitch 6000 or Matrix E7 through the COM port, and you have correctly set the Set UPS ID field. WARNING Do not set the Set UPS ID field unless you have a UPS attached to the SmartSwitch 6000 or Matrix E7, or you will disrupt your use of NetSight Element Manager. Accessing the UPS Window At the UPS window, you can configure the UPS ID model type for the uninterruptable power supply you have attached to the COM port on your device. You can also view information concerning the UPS connected to your SmartSwitch 6000 or Matrix E7 including: • The amount of time that your UPS has been running since the last start-up • The line voltage and battery output • The actual battery capacity of the UPS (dynamic bar graph) You can also use a button at the bottom of the window to disconnect your UPS, or you can use the Test option to initiate a self test of the unit. To access the UPS window: 1. From the Device View window, click on Device in the menu bar to access the Device menu. 2. Click on UPS. The UPS window, Figure 2-18, will appear. Managing the Module 2-51 The Device View Figure 2-18. The UPS Window UPS ID Displays the manufacturer and model typecode of the UPS attached to the COM port of the SmartSwitch 6000 or Matrix E7. You must assign this typecode for the UPS window to be active. (See Setting the UPS ID, on page 2-53, for instructions for setting the typecode for your UPS.) The valid typecodes are: • • • • • • • • • • • • Model 370 Model 400 Model 600 Model 900 Model 1250 Model 2000 Matrix 3000 Matrix 5000 SU 700 SU 1400 SU 2000XL Other UPS Uptime Displays the number of hours that the UPS has been operating since the last time it was started up. 2-52 Managing the Module The Device View Line Voltage Displays the voltage coming through the line attached to the SmartSwitch 6000 or Matrix E7. Battery Output Displays the amount of battery output voltage. Battery Capacity Displays the percentage of remaining battery capacity (100% indicates a fully charged battery). Test Results Displays the result of the last self-test performed by the UPS. The possible test results are: Unit OK The UPS unit is in working order. Unit Failed The UPS unit has failed the self-test. Check the unit for damage or consult your UPS user’s manual. Bad Battery The UPS unit battery is bad. No recent test No UPS self-test has been performed in the last five minutes. Unit in test... Please standby The UPS is currently in test mode. Setting the UPS ID You need to set the UPS ID typecode that indicates the manufacturer and model of the UPS. To set the UPS ID: 1. Click on the arrow next to the SET UPS ID text box. A Model number menu will appear. Scroll to highlight the appropriate UPS ID. (Consult the manual that was included when you purchased your UPS for the correct Model ID number.) 2. Click on the OK button. The UPS ID you have chosen will appear in the text box, and the UPS window will be active. If your UPS unit does not function after you have set this ID, check the manual you received with the UPS to ensure that you have chosen the correct UPS ID. If you need to change the ID, follow the directions given above. Using the Test Option You can use the test option to activate a self-test cycle for your unit. This self-test will check the viability of your unit and its battery. Managing the Module 2-53 The Device View To activate the test: 1. Click on the Test button. The unit will begin its self-test. The results of the test will appear in the Test Result text box next to the Test button. Using the Disconnect Option You can disconnect the UPS attached to your SmartSwitch 6000 or Matrix E7 through its COM port, as follows: 1. Click on the Disconnect button near the bottom of the UPS window. Your UPS will now be disconnected. To reconnect, simply click on the OK button, or close, then re-open the UPS window. Redirecting Traffic The Port Redirect window (Figure 2-19) allows you to redirect traffic from one or more interfaces directly to another interface — essentially mirroring the traffic at the “redirect” interface. This feature is useful in that it allows you to use an external analyzer on the “redirect” port to analyze data, without disturbing the normal switching operations at the original source ports. The Port Redirect window displays the interface remap table and allows you to add new entries to and delete existing entries from this table. When you set a source port to redirect to a destination port, the destination port will transmit out all packets received or transmitted on the source port. To access the Port Redirect window: 1. In the Chassis View window, select Device>Port Redirect (if you are managing a single device) or Chassis>Port Redirect (if you are managing a chassis with multiple modules). The Port Redirect window, Figure 2-19, appears. 2-54 Managing the Module The Device View Figure 2-19. The Port Redirect Window NOTE Chassis IP Address, Chassis Community Name, and the Contact button appear only if the chassis is a SmartSwitch 6000 with an assigned IP address. In order to see the Current Active Entries for this type of device, you must enter the Chassis IP Address and Community Name, then click Contact. The current port mappings are listed in the Current Active Entries list. You may add or delete entries in this list. Not all devices support the Source Module and Destination Module fields. NOTE Managing the Module 2-55 The Device View To add an entry: 1. SmartSwitch 6000 with assigned IP address only: Enter the Chassis IP Address and the Chassis Community Name, then click Contact to display the Current Active Entries. 2. If applicable: Click the arrow next to Source Module and select the desired source module from the drop-down list. 3. Click the arrow next to Source Port and select the desired source port from the drop-down list. 4. If applicable: Click the arrow next to Destination Module and select the desired destination module from the drop-down list. 5. Click the arrow next to Destination Port and select the desired destination port from the drop-down. 6. Click Add. The new entry is displayed in the Current Active Entries list, and redirection of the port traffic will begin. To delete an entry: 1. SmartSwitch 6000 with assigned IP address only: Enter the Chassis IP Address and the Chassis Community Name, then click Contact to display the Current Active Entries. 2. In the Current Active Entries list, click to highlight the entry you wish to delete. 3. Click Delete. The entry is deleted from the Current Active Entries list and the traffic from the source port will no longer be redirected to the destination port. Priority Configuration The SmartSwitch 6000 and Matrix E7 modules support priority packet forwarding. Priority packet forwarding lets you designate certain packets to be of higher importance than others, thereby allowing for the forwarding of these packets before packets of lower priority. This functionality is essential for time-critical applications — such as real-time video — on shared networks. NOTE The Priority Configuration menu option will only appear in the Device menu for modules that respond to any of NetSight Element Manager’s queries to the following OIDs: ctPriorityExtPortStatus, ctPriorityExtMaxNumMACEntries, or ctPriorityExtNumPktTypeEntries. If your module’s firmware does not respond to these queries, contact the Enterasys Global Call Center for firmware upgrade information. Frame priority is enabled by the “tagging” of MAC frames so that they are given a priority designation when they are forwarded by the SmartSwitch 6000 or Matrix E7 module — which is a tag-aware switch (i.e., one that adheres to the IEEE P802.1p and IEEE P802.1q Draft Standards). Tagging a frame is accomplished by adding a Tag Header to a frame immediately following its original Destination and Source MAC address fields (and any 2-56 Managing the Module The Device View routing fields, if present), and then recomputing the Frame Check Sequence (FCS) appropriately. On receiving such a frame, a tag-aware switch will read the priority from the tagged portion of the frame, remove the Tag Header, recompute the FCS, and then direct it to its appropriate transmission queue. There are eight priority levels — indicated 0 through 7— available to designate user priority. Frames tagged with a 0 represent the lowest priority level (or normal) traffic, and frames tagged with a 7 indicate the highest priority level traffic. The 6000 and Matrix E7 series modules themselves support two transmission queues: one that is for 0 or normal priority traffic (or any non-tagged traffic), and a second queue that is reserved for frames that have been tagged with a priority level of 1 or higher. On receiving any priority-tagged frames, the SmartSwitch 6000 or Matrix E7 will forward them out of the high priority queue before forwarding any frames in the normal priority queue. However, the SmartSwitch 6000 or Matrix E7 will tag outgoing frames with the full range of eight priority levels, so that upon reception, a device that supports the entire range of priority queuing will forward the frame appropriately. You can use NetSight Element Manager to configure the criteria that determine the priority in which frames will be queued for transmission by your SmartSwitch 6000 or Matrix E7 module. Several different criteria can be used to determine a frame’s transmission queue order: • The module and port at which the frame was received. • The destination and/or source MAC address associated with the frame. • A combination of destination and/or source MAC address and the frame’s protocol type. • The frame’s protocol type. When you configure the transmission queue for a specific frame, an entry is made in one of three priority tables maintained by the SmartSwitch 6000 or Matrix E7 module. These tables are used to determine which transmit queue to use — normal priority or high priority — when forwarding frames. • The ctPriorityExtPortTable maintains priority entries based on a frame’s receive port. • The ctPriorityExtMACTable maintains priority entries based on a frame’s MAC-layer information. • The ctPriorityExtPktTypeTable maintains priority entries based on the frame’s protocol type. The following sections discuss how to use the Port Priority Configuration window, the MAC Based Priority Configuration window, and the Frame Priority Configuration window to make entries in these transmit priority tables. Managing the Module 2-57 The Device View Configuring Priority Queuing Based on Receive Port You can use the Port Priority Configuration window, Figure 2-20, to determine packet queuing based solely upon the port at which the packet was received. This allows you to ensure that a connected user or LAN segment will have priority when frames that were received on that port are queued for transmission. Highlight a module/port, then use the drop-down list box to select a priority (Normal–7). Click Apply to set the priority at the device. Any priority of 1 or higher will allow packets received at the chosen port to be forwarded from the higher priority transmission queue. Figure 2-20. The Port Priority Configuration Window NOTES In the event that an incoming packet received on a designated port already has a priority associated with it, you can use the ctPriorityExtPortFwdInboundPriority OID to determine whether the incoming priority should remain intact, or be replaced with the priority that you have set for the receiving port. Use the MIB Tools utility suite to set the ctPriorityExtPortFwdInboundPriority OID to 1 (for the appropriate port instance) if you want the incoming packet to retain its originally set priority when received by the port; set the OID to 2 if you want the packet to take the default priority set for the receiving port. Refer to the Element Manager Tools Guide for information on using the MIB Tools suite. To access the Port Priority Configuration window: 1. Click on Device to access the Device menu. 2. Drag down to Priority Configuration, and to the right to select Port Based from the cascading menu. The Port Priority Configuration window (Figure 2-20) will appear. The Port Priority Configuration window displays the contents of the ctPriorityExtPortTable. It has a list box that displays the front panel interfaces supported by the SmartSwitch 6000 or Matrix E7 module, along with the slot number occupied by the module, and any transmit priority that has been assigned to those interfaces. 2-58 Managing the Module The Device View To assign a transmit priority to a port: 1. Click to highlight the port interface of interest in the Port # column. Each interface is identified by its MIBII IfIndex. 2. Click on the Transmit Priority drop-down list box, and scroll to select the desired priority level (Normal–7) for forwarding packets received on the selected port. NOTE Since the SmartSwitch 6000 and Matrix E7 modules have two transmit queues, a priority of Normal will cause packets received on that port to be forwarded through the lower priority queue, and any priority of 1 through 7 will cause the packets to be forwarded through the higher priority queue. However, other tag-aware switches may use the full range of eight priority queues — so the priority that you assign may have bearing on how the frame is forwarded when it is received by another device. 3. Click the Apply button. The defined priority will appear next to the port in the Transmit Priority column. Configuring Priority Queuing Based on MAC-layer Information You can use the MAC Based Priority Configuration window, Figure 2-21, to determine packet queuing based upon the packet’s Source and/or Destination MAC address, as well as the packet’s frame Type. These priority entries, based on the frame’s MAC-layer information, are maintained in the ctPriorityExtMACTable. You can create up to 1024 priority entries for queuing frames based upon on MAC-layer information. Managing the Module 2-59 The Device View Click Add to enter a MAC Address to which you want to assign a higher priority transmission queue. Select whether you want the address type to be destination, source, or either type. Determine whether to apply the priority to all frames with the given address and SA/DA type, or only to frames of a specific type. Finally, select a priority level, and click Apply. Figure 2-21. The MAC Based Priority Configuration Window To access the MAC Based Priority Configuration window: 1. Click on Device to access the Device menu. 2. Drag down to Priority Configuration, and to the right to select MAC Based from the cascading menu. The MAC Based Priority Configuration window will appear. The MAC Based Priority Configuration window contains the following information. Current Priority Entries The Current Priority Entries list box displays any MAC-based priority entries that have been configured for the SmartSwitch 6000 or Matrix E7 module. It has four columns: 2-60 • MAC Address, which identifies the physical address for which a frame transmit priority entry has been configured. • Address Type, which identifies whether the address of interest is in the source or destination field, or in both fields, of the frame. • Frame Type, which indicates whether all frames with the given address will have a transmit priority, or whether a specified frame Type will be used in combination with the address. • Priority, which displays the current transmit priority assigned to the entry. Managing the Module The Device View Below the Current Priority Entries list box, several text fields and command buttons allow you to configure or edit MAC-based priority entries: MAC Address This text field allows you to enter a new MAC address that will have a transmit priority associated with it. Address Type This drop-down list box allows you to select whether the given MAC address must be in the source address portion of the frame (SA), the destination address portion (DA), or in either portion (SA/DA). Frame Type This radio button/text box combination allows you to choose whether All frame Types with the given address will be given priority, or whether frames of a Specific type (as defined in the associated text box) will be given priority. Priority Priority, which indicates the transmit priority level assigned to the configured entry. To assign a transmit priority based on MAC-layer information: 1. Click on the Add button. The entry fields will be activated. 2. Click in the MAC Address text box, and type in the physical address in XX-XX-XX-XX-XX-XX format, where X is a valid hexadecimal value (A-F or 0-9), for which you want to configure a transmit priority. 3. Click on the Address Type drop-down list box, and select whether you want the specified address to be in the Source Address portion of the frame (SA), the Destination Address portion (DA), or in either portion (SA/DA). 4. Specify a Frame Type that you want associated with the frame: a. Click on the appropriate Frame Type option button: Specific if you want a certain Frame Type associated with the given MAC address, or All if you do not care about the Frame Type. b. If you select Specific, click in the associated text box and type in the two-byte hexadecimal value for that protocol type (e.g., 0BAD for Banyan frames). NOTE When creating priority entries, you can specify up to four Frame Types for the same MAC Address value. Managing the Module 2-61 The Device View 5. Click on the Priority drop-down list box, and scroll to select the desired priority level — Normal (0)–7 — for forwarding packets received with the specified MAC-layer information. NOTE Since the SmartSwitch 6000 and Matrix E7 modules have two transmit queues, a priority of Normal will cause packets to be forwarded through the lower priority queue, and any priority of 1 through 7 will cause the packets to be forwarded through the higher priority queue. 6. Click the Apply button. The Current Priority Entries list box will be updated with the newly created entry. You can edit an existing address entry by changing the priority currently associated with the entry. To do so: 1. Highlight the desired entry in the Current Priority Entries list box, and click on the Edit button. The Priority drop-down list box will be activated. (All other parameters will remain grayed-out, since they cannot be edited once they are initially configured). 2. Click on the Priority drop-down list box, and scroll to select the new priority level (Normal–7) for forwarding packets received with the specified MAC-layer information. 3. Click the Apply button. The Current Priority Entries list box will be updated with the newly edited entry. To clear a priority entry from the ctPriorityExtMACTable: 1. Highlight the desired entry in the Current Priority Entries list box, and click on the Delete button. The entry fields will be cleared from the table. Configuring Priority Queuing Based on Packet Type You can use the Frame Priority Configuration window, Figure 2-22, to determine packet queuing based solely upon its Type field data. Frame type entries are maintained in the ctPriorityExtPktTypeTable. You can configure up to 15 frame Type priority entries for the device. 2-62 Managing the Module The Device View Click Add to activate the Frame Type field, then type in the 2 byte hexadecimal frame Type. Use the drop-down list box to select a priority (Normal–7) associated with that frame Type. Click Apply to set the priority at the device. Any priority of 1 or higher will allow packets received at the chosen port to be forwarded from the higher Figure 2-22. Frame Priority Configuration Window To assign a transmit priority based on frame Type information: 1. Click on the Add button. The entry fields will be activated. 2. Click in the Frame Type text box, and type in the 2-byte frame Type in XXXX format, where X is a valid hexadecimal value (A-F or 0-9), for which you want to configure a transmit priority. 3. Click on the Priority drop-down list box, and scroll to select the desired priority level (Normal–7) for forwarding packets received with the specified Type field information. NOTE Remember, since the SmartSwitch 6000 and Matrix E7 modules have two transmit queues, a priority of Normal will cause packets to be forwarded through the lower priority queue, and any priority of 1 through 7 will cause the packets to be forwarded through the higher priority queue. 4. Click the Apply button. The Frame Type Entries list box will be updated with the newly created entry. You can edit an existing frame Type entry by changing its previously assigned priority. To do so: 1. Highlight the desired entry in the Current Priority Entries list box, and click on the Edit button. The Priorities drop-down list box will be activated (the Frame Type cannot be edited once it is initially configured). Managing the Module 2-63 The Device View 2. Click on the Priority drop-down list box, and scroll to select the desired priority level (Normal–7) for forwarding packets received with the specified frame Type information. 3. Click the Apply button. The Frame Type Priorities Entries list box will be updated with the newly edited entry. To clear a priority entry from the ctPriorityExtPktTypeTable: 1. Highlight the desired entry in the Frame Type Priorities Entries list box, and click on the Delete button. The entry fields will be cleared from the table. Broadcast Suppression From the Broadcast Statistics and Suppression window, you can monitor broadcast peak statistics, and suppress the amount of broadcast frames received on each interface on your SmartSwitch 6000 or Matrix E7 module (thereby protecting your network from broadcast storms). Specifically, you can monitor the number of frames each interface is receiving, and set limits on how many of those broadcast frames will be forwarded to the other interfaces. Once a threshold has been reached on an interface, broadcast frames will be dropped. From the Broadcast Statistics and Suppression window, you can set a unique threshold for each interface on a frames per second basis. To access the Broadcast Statistics and Suppression window: 1. Click on Device to access the Device menu. 2. Click on Broadcast Suppression. The Broadcast Statistics and Suppression window, Figure 2-23, will appear. 2-64 Managing the Module The Device View Figure 2-23. The Broadcast Statistics and Suppression Window Port # This read-only field indicates the number assigned to each interface on the device. Total RX Displays the total number of broadcast frames received on the interface since the device was last initialized. Peak Rate The peak rate of broadcast frames (in frames per second) received on the interface since the device was last initialized or the peak value was administratively reset through this window. Time Since Peak The time (in a days HH:MM:SS format) since the peak broadcast rate occurred; that is, the current MIB-II system uptime minus the system uptime when the peak occurred (as recorded by the ctBroadcastPeakBroadcastRateTime OID). This value will be reset to 0 days 00:00:00 when the device is re-initialized or when you administratively reset the peak values. Managing the Module 2-65 The Device View To reset the Peak Rate and Time Since Peak values: 1. Shift- or Control-click to select one or more interfaces for which you want to reset the values. 2. Click on the Reset Peak Rate and Peak Time on Selected Ports: drop-down list box, and select YES. 3. Click on the Apply button. The Peak Rate and Time Since Peak values will be reset for the selected interfaces. Threshold The maximum number of received broadcast frames per second that may be forwarded by this interface to other interfaces on the device. Any number of broadcast frames received over this threshold will be dropped. The default value for the interface is near the theoretical maximum frames per second for the interface, i.e., 14,880 for 10Mb Ethernet interface, 148,880 for 100Mb Ethernet or 1,488,800 for Gigabit Ethernet. To change the Receive Broadcast Threshold: 1. Shift- or Control-click to select one or more interfaces for which you want to change the broadcast packet threshold. 2. Highlight the value currently in the Receive Broadcast Threshold on Selected Ports: field and type in a new broadcast threshold value. Allowable values begin at 10 and proceed in multiples of ten. NOTE When you enter a value less than 10, the threshold will default to a value of 0. If you enter a value that is not a multiple of 10 it will default to the last multiple of 10, i.e., if you enter 15 as the new threshold value, the threshold value will be set to 10; if you enter 49 as the new threshold value, the threshold value will be set to 40. 3. Click on the Apply button. The new threshold will be applied to the selected interfaces. Any broadcast frames received by the interface exceeding the set threshold will be dropped. The System Resources Window The System Resources window displays attributes of the SmartSwitch 6000 or Matrix E7 module’s CPU (including CPU type, and installed and available memory), as well as the current and peak utilization of the CPU for switching. It also lets you reserve the desired amount of CPU processing used for switching or management purposes, as well as reset the peak switch utilization information. 2-66 Managing the Module The Device View To display the System Resources window: 1. Click on Device in the Device View menu bar to display the Device menu. 2. Click on System Resources. The System Resources window, Figure 2-24, will appear. Figure 2-24. The System Resources Window CPU Type Displays the type and speed (in megahertz) of the CPU (processor) used by the system. Flash Memory Installed: Displays the total amount of installed flash memory (in Mbytes). Flash memory is the reprogrammable memory used to store the device’s image code. Flash Memory Available: Displays (in Kbytes) the current amount of flash memory that is currently free and not currently being used for code and data. DRAM Installed: Displays the total installed Dynamic Random Access Memory (DRAM) in Mbytes. DRAM is volatile memory used to temporarily store data via capacitors and transistors, which must be constantly recharged to retain data. Access time to read data stored on DRAM is slower than reading data stored on Static Random Access Memory (SRAM) — since the processor cannot read DRAM while the capacitors are being recharged. A DRAM chip, however, can store about four times more data than a comparable SRAM chip, and is less expensive to manufacture. Managing the Module 2-67 The Device View DRAM Available: Displays (in Kbytes) the amount of free DRAM that is not currently being used for data storage. SRAM Installed: Displays the total amount of SRAM (Static Random Access Memory) that is installed (in Mbytes). SRAM retains data as long as the CPU is powered up. Since it does not need the constant recharging of DRAM memory, its data can be accessed much faster. SRAM is often used to temporarily cache — or store — frequently accessed data or instructions commonly used by the processor. SRAM can store less data than DRAM, however, and is more expensive to manufacture. SRAM Available: Displays (in Kbytes) the amount of free SRAM that is not currently being used for data storage. NVRAM Installed: Displays (in Kbytes) the total installed Non-volatile Random Access Memory (NVRAM). NVRAM retains data when the device is powered down, such as the device IP address, community table information, and so forth. NVRAM Available: Displays (in Bytes) the amount of free NVRAM that is not currently being used for data storage. Current Switch Utilization: Displays the current load on the switch, which is based on a percentage of maximum switching capacity of 100%. Peak Switch Utilization: Displays the peak percentage of switch load (based on a maximum of 100%) that has occurred on the switch, since power-up or last reset, along with the time and date that it occurred. This field can be administratively refreshed, as described below. NOTE In accordance with Year 2000 compliance requirements, NetSight Element Manager now displays all dates with four-digit year values. Reset Peak Switch Utilization: This option allows you to clear the Peak Switch Utilization field.The Peak Switch Utilization field will refresh to display the current switch utilization, date, and time as the new peak values (until a new peak is experienced). 2-68 Managing the Module The Device View To reset peak switch utilization: 1. Click on the arrow next to the Reset Peak Switch Utilization field and select Yes from the drop-down list. (The default value is No.) 2. Click on the Apply button to reset the displayed peak switch utilization. Note that when the window refreshes the value in this field will return to No. The peak switch utilization values — including percentage, date, and time — will be refreshed to display the current values. These values will change once a new peak is experienced (or at the next peak reset). NOTE The default setting for this field is No. While No is selected the peak switch utilization value will not be reset when you click on the Apply button. You must choose Yes for a reset to take place. CPU Management Reservation: Displays the desired amount of CPU bandwidth reserved for management purposes: None, Limited, or Full. Bandwidth that is not reserved for management will be devoted to switching. Reserving CPU Bandwidth Depending on your needs and the main function of your SmartSwitch 6000 or Matrix E7 module, you may wish to change the amount of CPU bandwidth that is currently reserved for management purposes. The three possible allocations of CPU bandwidth on your SmartSwitch 6000 or Matrix E7 for management are: • None — the SmartSwitch 6000 or Matrix E7 will reserve all bandwidth for switching, therefore management frames may be dropped under heavy loads. • Limited — the management of the SmartSwitch 6000 or Matrix E7 may be slow while the device is experiencing heavy switching loads. • Full — management of the SmartSwitch 6000 or Matrix E7 is always possible and management frames will take priority over switched data if full CPU bandwidth is required (switched frames may be dropped). To configure the CPU Management Reservation: 1. Next to the CPU Management Reservation field click on the arrow and select None, Full, or Limited from the drop-down list. 2. Click on the Apply button to set the new CPU management reservation. A window will appear stating the set was successful. Managing the Module 2-69 The Device View 802.1Q VLANs This section introduces and describes pre-standard IEEE 802.1Q port-based Virtual Local Area Network (VLAN) technology and the windows used to configure Enterasys 802.1Q VLAN-capable devices. SmartSwitch 6000 or Matrix E7 firmware version 4.00.08 and above support the pre-standard IEEE 802.1Q draft specification for port-based VLANs. NOTES In certain SmartSwitch 6000 firmware versions, 802.1Q operation is not fully supported.Refer to your firmware release notes for more information. What is a VLAN? A Virtual Local Area Network (VLAN) is a logical group of devices that function as a single Local Area Network segment (broadcast domain). Devices comprising a VLAN may be (physically) widely separated, allowing users located in separate areas or connected to separate ports to belong to a single VLAN group. Users assigned to a VLAN can send and receive broadcast and multicast traffic as though they were all physically connected to a single network segment. VLAN-capable switches isolate broadcast and multicast traffic received from VLAN groups, and contain broadcasts and multicasts from members of a VLAN within that group. What is an 802.1Q Port-Based VLAN? Switches that support the pre-standard IEEE 802.1Q draft specification for port-based VLANs act by classifying frames into VLAN membership. Usually, VLAN classification is based on tag headers (VLAN tags) in the headers of data frames. The tag header is inserted into the frame directly after the Source MAC address field. A four-byte field in the tag header is used as the VLAN identifier. These VLAN tags are added to data frames by the switch as the frames are transmitted and/or received by certain ports, and are later used to make forwarding decisions by the switch and other 802.1Q switches. In the absence of a VLAN tag, a frame is assigned VLAN membership according to the VLAN configuration of the switch port that receives the frame. About 802.1Q VLAN Configuration and Operation An 802.1Q VLAN is defined by assigning it a unique identification number (the VLAN ID) and an optional name. The VLAN ID is used to identify data frames that originate from, and are intended for, the ports assigned to the VLAN. Up to 64 VLANs may be created, with VLAN IDs ranging from 2-4094. VLAN ID 1 is reserved for the Default VLAN. 2-70 Managing the Module The Device View Ports on 802.1Q switches are assigned membership in a VLAN by associating a VLAN ID with each port on the switch. The VLAN ID is combined with the port’s identification (e.g., module X port X) to form the Port VLAN ID (PVID). NOTE When 802.1Q mode is initially activated on a device, all ports are associated with the Default VLAN (VLAN ID 1). If a VLAN ID has not been assigned to a particular port on an 802.1Q switch, any frames received from that port will be classified as belonging to the Default VLAN. When 802.1Q is implemented for a SmartSwitch 6000 or Matrix E7 that has an HSIM-A6DP installed, each LEC will be represented as an individual port which can be easily assigned membership in a VLAN. NOTE For SmartSwitch 6000 or Matrix E7 firmware versions 4.00.08 and above, the number of LECs supported by the HSIM-A6DP in 802.1Q mode is limited to 32. Once VLANs have been configured and activated, all frames with unknown destination addresses (including broadcast, unknown multicast, and unknown unicast frames) will be contained within the VLAN of their origin. The switch’s Filtering Database tracks the associations between MAC addresses, VLAN eligibilities, and port numbers, and is used to make forwarding decisions for frames. All VLANs share a single Spanning Tree. Ingress List Operation A port’s ingress list specifies the VLAN with which received frames will be associated. The switch’s Filtering Database tracks the associations between VLAN eligibilities, MAC addresses, and port numbers. Untagged frames received by an 802.1Q switch port are classified according to the VLAN membership of the port that receives the frame. Tagged frames received by an 802.1Q switch port are classified according to the VLAN indicated in their tag header. A port may receive a tagged frame that specifies a VLAN other than the one assigned to the port. Egress List Operation Each port’s egress list specifies which VLANs are associated with the port, and specifies what type of frame (tagged and/or untagged) to transmit for each particular VLAN on a port. This information may be statically defined by the user, or dynamically learned and maintained by the switch’s Filtering Database. Managing the Module 2-71 The Device View If a port receives a tagged frame that specifies a VLAN other than the one assigned to the port, the switch will dynamically associate that frame’s source address and VLAN with the port (i.e., add that frame’s VLAN to the receiving port’s egress list). Dynamically learned VLANs are subject to the same aging rules as source addresses (e.g., if a tagged frame belonging to a dynamically learned VLAN is not received by the port within the switch’s aging time, the transmitting station’s source address and VLAN will be aged out for that port; no unknown destination frames belonging to the station’s VLAN will be transmitted through the port until the VLAN is dynamically learned once again). Only tagged frames can cause the switch to dynamically change a port’s egress list. 802.1Q Port Types Each 802.1Q switch port is assigned a mode of operation. Port types include: 1Q Trunk If VLAN membership is to apply to users across several switches, ports used to connect 802.1Q-aware devices are configured to use 1Q Trunk mode. In this mode, all frames (except BPDUs) are transmitted with a tag header included in the frame, allowing VLAN frames to maintain their VLAN ID across multiple switches. Any untagged frames received by the port are dropped. 1Q Trunk ports are configured to be members of all VLANs. 1d Trunk This mode allows a port to transmit to a traditional (802.1d) switch fabric. These ports transmit only untagged frames, and the switch expects to receive only untagged traffic through the port. 1d Trunk ports are configured to be members of all VLANs. This mode can be used to share a connection among multiple VLANs (e.g., sharing a server between two or more separate VLANs). Hybrid Hybrid mode (enabled by default) allows a port to receive and transmit both tagged and untagged frames. In this mode, the port will be a member of its statically assigned VLAN, as well as any dynamically learned VLANs (remember, dynamically learned VLANs are subject to the same aging rules as source addresses). Configuring Your 802.1Q VLANS Before you can define and configure 802.1Q port-based VLANs on your device, you must activate the device’s 802.1Q operational mode; this operation can be performed using Local Management or the MIB Tools application. Using MIB Tools, 802.1Q mode can be activated through the Container MIB’s Logical Entry Table (contLogicalEntryTable). When the 802.1Q component is activated, the device will automatically reset, and begin operating in 802.1Q mode. Refer to your device’s Local Management documentation for instructions on activating a device’s 802.1Q operational mode via Local Management. For details on the MIB Tools application, refer to your Element Manager Tools Guide. 2-72 Managing the Module The Device View To set up your 802.1Q port-based VLANs using NetSight Element Manager, you must first define the desired VLANs using the VLAN Config window (Figure 2-25), which allows you to assign VLAN IDs and optional VLAN names, and enable or disable VLANs. After your VLANs are defined, you may configure the ingress and egress lists for each port using the VLAN Port Config window (Figure 2-26) and the VLAN Egress Port Config window (Figure 2-27), respectively. Setting VLAN Parameters and Operational Modes 802.1Q VLANs are defined using the VLAN Config window, which is accessed from the Device menu in your switch’s Device View. To launch the window: 1. Click on Device in the Device View menu bar to display the Device menu. 2. Drag down to 802.1Q VLAN, then right to select 802.1Q VLAN Config. The VLAN Config window, Figure 2-25, will appear. Figure 2-25. The VLAN Config Window The Configured VLANS list box and fields allow you to view, create, modify, delete, enable, and disable 802.1Q port-based VLANs. The list box displays the following information about your defined VLANs: Managing the Module 2-73 The Device View VLAN ID The VLAN ID is used to identify data frames that originate from, and are intended for, the ports assigned to the VLAN. Up to 64 VLANs may be created, with VLAN IDs ranging from 2-4094. The VLAN ID is combined with the port’s identification (e.g., module X port X) to form the Port VLAN ID (PVID). VLAN ID 1 is reserved for the Default VLAN. VLAN Name An optional 32-character VLAN name may be assigned to a created VLAN. The Default VLAN is assigned the name DEFAULT VLAN, which cannot be changed or deleted. Admin Status This field indicates whether the VLAN is enabled or disabled. Unless Enable is selected when port-based VLANs are initially defined, they are disabled by default. The Default VLAN cannot be disabled. Creating and Modifying VLANs The fields immediately below the Configured VLANS list box are used to create and modify your port-based VLANs. To create a new VLAN: 1. In the VLAN ID field, enter a unique value between 2-4094. VLAN ID 1 is reserved for the Default VLAN, and cannot be used. 2. If desired, enter a name for the VLAN in the VLAN Name field. VLAN names must be 32 characters or less. NOTE Unless Enable is selected when a port-based VLAN is initially defined, it will be disabled by default. A new VLAN that is left in a Disabled state will remain disabled until a port is assigned to it, at which time it will be automatically enabled. If you are changing a VLAN’s port assignment, the VLAN should be disabled before changing the port configuration. See Enabling and Disabling VLANs, on page 2-75, for instructions on disabling VLANs. See Performing Ingress List Configuration, on page 2-75, for details on completing your VLAN port configuration. 3. Click the Apply button. The new VLAN will be added to the Configured VLANS list box. Once a VLAN has been created, its VLAN ID cannot be modified. If you wish to change a VLAN’s ID, you’ll have to delete the VLAN and create a new entry. See Deleting VLANs, below, for instructions on deleting a VLAN. Attempting to change a VLAN’s ID will result in the creation of a new VLAN with the same VLAN name. To modify an existing VLAN’s name, select its entry in the Configured VLANS list box. The selected VLAN’s name will be displayed in the VLAN Name field. Modify the displayed name as outlined in Steps 2-3, above. 2-74 Managing the Module The Device View Deleting VLANs The VLAN Config window also allows you to delete VLANs (except for the Default VLAN, which cannot be deleted). When a VLAN is deleted, any ports assigned to that VLAN will automatically become members of the Default VLAN. To delete a VLAN from your 802.1Q switch: 1. Click to select the desired VLAN entry in the Configured VLANS list box. 2. Click the Delete button. The selected VLAN will be removed from the list box. Enabling and Disabling VLANs NOTE Unless Enable is selected when a VLAN is initially defined, it is disabled by default. A new VLAN that is left in a Disabled state will remain disabled until a port is assigned to it, at which time it will be automatically enabled. If you are changing a VLAN’s port assignment, the VLAN should be disabled before changing the port configuration. See Performing Ingress List Configuration, on page 2-75, for details on completing your VLAN port configuration. To enable or disable VLANs: 1. Select the desired VLAN entry in the Configured VLANS list box. 2. In the VLAN Admin field, click to select Enable or Disable. 3. Click the Apply button. The selected VLAN will be enabled or disabled, depending on your selection. Updating VLAN Config Window Information Clicking the Refresh button will update the information displayed in the Configured VLANs list without closing the window. Performing Ingress List Configuration 802.1Q VLAN port assignment and ingress list configuration operations are performed using the VLAN Port Config window, which is accessed from the Device menu in your switch’s Device View. See Ingress List Operation, on page 2-71 for details on ingress lists. To launch the window: 1. Click on Device in the Device View menu bar to display the Device menu. 2. Drag down to 802.1Q VLAN, then right to select 802.1Q VLAN Port Config. The VLAN Port Config window, Figure 2-26, will appear. Managing the Module 2-75 The Device View Figure 2-26. The VLAN Port Config Window The 802.1Q VLAN Port Assignment list box in this window displays the following information about ports on your 802.1Q switch: Slot/Port These fields display the slot and port index for each port on your 802.1Q switch. VLAN ID This field displays the VLAN ID of the VLAN to which the port is currently assigned. Mode This field displays the port’s current mode of operation. Port operational modes include: 2-76 • Dot1DTrunk mode, which is used for ports that are to connect to a traditional (802.1D) switch fabric. These ports transmit only untagged frames. 1d Trunk ports are configured to be members of all VLANs. • Dot1QTrunk mode, which is used for ports used to connect 802.1Q-aware devices if VLAN membership is to apply to users across several switches. These ports transmit only tagged frames. 1Q Trunk ports are configured to be members of all VLANs. • Hybrid mode, which allows a port to receive and transmit both tagged and untagged frames. In this mode, the port will be a member of its statically assigned VLAN, as well as any dynamically learned VLANs. Hybrid mode is enabled by default. Managing the Module The Device View For more information on 802.1Q port operational modes, see 802.1Q Port Types, on page 2-72. Discard This field displays the port’s current frame discard format (discardTagged, discardUntagged, or noDiscard). The VLAN ID, Port Operational Mode, and Port Discard fields, below the list box, allow you to configure your ports as follows: VLAN ID This field allows you to associate a selected port with an existing VLAN. See Assigning VLAN Membership to Ports, on page 2-77, for details on performing this operation. Port Operational Mode This field allows you to assign a mode of operation to a selected port. See Setting Port Operational Modes, on page 2-77, for details on using this field. Port Discard This field allows you to specify the frame discard format (discardTagged, discardUntagged, or noDiscard) for a selected port. See Setting Port Frame Discard Formats, on page 2-78, for details on using this field. Assigning VLAN Membership to Ports To assign a port on your 802.1Q switch to any of your defined VLANs: 1. In the list box, click to select a port that you wish to assign to a VLAN. The port’s current VLAN configuration information, including its VLAN ID, will be displayed in the fields below the list box. 2. In the VLAN ID field, click to select the VLAN ID of the VLAN to which you wish to assign the selected port. 3. Click the Apply button. The new VLAN assignment will be reflected in the VLAN Port Config window’s list box for the selected port. NOTE If you assign a port to a VLAN that is in a Disabled state, the VLAN will automatically be Enabled once the port assignment operation has been completed. Setting Port Operational Modes To assign a port operational mode (dot1dTrunk, dot1QTrunk, or hybrid) to a port on your 802.1Q switch: Managing the Module 2-77 The Device View 1. In the VLAN Port Config window’s list box, click to select a port to which you wish to assign a port operational mode. 2. In the Port Operational Mode field, click to select the desired operational mode. 3. Click the Apply button. The selected mode will be reflected in the list box for the selected port. Setting Port Frame Discard Formats To assign a frame discard format (discardTagged, discardUntagged, or noDiscard) to a port on your 802.1Q switch: 1. In the VLAN Port Config window’s list box, click to select a port to which you wish to assign a frame discard format. 2. In the Port Discard field, click to select the desired frame discard format. 3. Click the Apply button. The selected mode will be reflected in the list box for the selected port. Updating VLAN Port Config Window Information Clicking the Refresh button will update the information displayed in the 802.1Q VLAN Port Assignment list without closing the window. Performing Egress List Configuration 802.1Q VLAN switching allows each port on a switch to transmit traffic for any or all defined VLANs on your network. During egress list configuration, you determine which VLANs are on each port’s egress list. See Egress List Operation, on page 2-71 for details on egress lists. Egress list configuration operations are performed using the VLAN Egress Port Config window. To launch the window: 1. In the Chassis View window, select Device>VLAN>VLAN Egress Port Config.... from the menu. The VLAN Egress Port Config window, Figure 2-27, appears. 2-78 Managing the Module The Device View Figure 2-27. The VLAN Egress Port Config Window Selected VLAN The Selected VLAN box at the top of this window lists the VLANs currently configured on the device. You can select a VLAN from this list to associate with the egress lists on the device’s ports. The Selected VLAN list includes the following information: Slot Number Sequence number identifying the slot location of the device on which the VLAN is configured. Managing the Module 2-79 The Device View VLAN ID Unique identifier for the VLAN. Name Name assigned to the VLAN. Port Egress Information The Port Egress Information box lists the ports whose egress lists contain the selected VLAN. You can use this list to change how frames belonging to the selected VLAN will be forwarded out a port. Index Sequence number identifying the port. Current Displays how frames belonging to the selected VLAN are currently forwarded out the port: No Egress (frames will not be transmitted), Tagged (frames will be transmitted as tagged), or Untagged (frames will be transmitted as untagged). Desired Displays how frames belonging to the selected VLAN will be forwarded out the port: No Egress (frames will not be transmitted), Tagged (frames will be transmitted as tagged), or Untagged (frames will be transmitted as untagged). The Status bar at the bottom of the window indicates the operation currently taking place in the window. Building an Egress List To build egress lists for your 802.1Q switch: 1. In the list box at the top of the VLAN Egress Port Configuration window, click to select a VLAN. The ports that contain this VLAN in their egress lists are displayed in the lower portion of the window. 2. To set the egress type for one port: In the Port Egress Information list, right-click the desired port, and select how the frames are to be transmitted: No Egress (frames will not be transmitted), Tagged (frames will be transmitted as tagged), or Untagged (frames will be transmitted as untagged). To set the egress type for all ports: In the Port Egress Information list, right-click any port, and select All No Egress (frames will not be transmitted), All Tagged (frames will be transmitted as tagged) or All Untagged (frames will be transmitted as untagged). 3. Click Apply to set the change(s). 4. Repeat for another VLAN, if desired. 2-80 Managing the Module The Device View VLAN and Priority Configuration For firmware versions 5.0.x and higher, the Bridge Extension Configuration windows allow you to define and configure 802.1Q VLANs and port priority for your SmartSwitch 6000 and Matrix E7 modules. Define your VLANs using the VLAN Configuration window, which allows you to assign VLAN IDs and VLAN names, and enable or disable VLANs. After your VLANs are defined, you can configure basic and advanced VLAN parameters and VLAN port egress lists using the VLAN Port Configuration windows and the VLAN Egress Port Configuration window, respectively. Bridge Extension functionality also lets you configure port priority and traffic classes using the Port Priority and Port Traffic Classes windows. Additional priority windows also allow you to configure GARP (Generic Attribute Registration Protocol) times and enable GMRP (GARP Multicast Registration Protocol) on each port. Configuring Bridge and Bridge Port Capability Use the Bridge Extension Configuration window to view the bridge extension functionality implemented on the device, and enable or disable Traffic Classes, GMRP, and GVRP at the device level (if supported). You can also access further configuration windows using the VLAN and Priority buttons at the bottom of the window. 1. In the Device View, select Bridge Extension Configuration... from the Device menu. The Bridge Extension Configuration window, Figure 2-28, appears. Managing the Module 2-81 The Device View Figure 2-28. The Bridge Extension Configuration Window The Bridge Capability fields indicate whether the device implements certain IEEE 802.1D and 802.1Q functionality: Extended Multicast Filtering Service Devices that implement this functionality can perform filtering of individual multicast addresses controlled by GMRP (GARP Multicast Registration Protocol). GMRP is a protocol used to register multicast addresses on ports to control flooding of multicast frames. Traffic Classes Devices that implement this functionality can map user priority to multiple traffic classes. Priority is mapped to a specific traffic class (queue number), and frames are transmitted based on what queue they are in. Frames in the highest numbered queue are transmitted out a port first. Static Entry Individual Port Devices that implement this functionality allow you to specify ports that frames must be received from for filtering information to apply. VLAN Learning Displays the filtering database modes of operation implemented by the device: 2-82 Managing the Module The Device View IVL — Independent VLAN Learning SVL — Shared VLAN Learning IVL/SVL — Both Independent and Shared VLAN Learning Configurable PVID Tagging Devices that implement this functionality have the ability to override the default PVID setting and the egress state (Tagged or Untagged) on each port. Local VLAN Capable Devices that implement this functionality can support multiple local bridges, outside of the scope of 802.1Q defined VLANs. Traffic Classes The Current and Desired fields display whether Traffic Classes (queues) are currently enabled or disabled on the device and allow you to change the setting. When Traffic Classes are enabled, the device can map user priority to specific traffic queues. GMRP The Current and Desired fields display whether GMRP (GARP Multicast Registration Protocol) is currently enabled or disabled on the device and allow you to change the setting. GMRP is a protocol used to register multicast addresses on ports to control flooding of multicast frames. GVRP The Current and Desired fields display whether GVRP (GARP VLAN Registration Protocol) is currently enabled or disabled on the device and allow you to change the setting. GVRP is a protocol used to dynamically add VLANs to port egress lists across a domain. The Bridge Port Capability table lists the ports on the device and whether they implement certain IEEE 802.1D and 802.1Q functionality: Port Displays the number that identifies the port. VLAN Tagging Ports that implement this functionality support 802.1Q VLAN tagging of frames and GVRP (GARP VLAN Registration Protocol). Configure Frame Types Ports that implement this functionality allow you to configure the port's Acceptable Frame Types. This setting specifies whether a port will accept both tagged and untagged frames, or only tagged frames. Ingress Filtering Ports that implement this functionality support the discarding of any frame received on a port whose VLAN classification is not on that port's egress list. Managing the Module 2-83 The Device View Configuring Traffic Classes, GMRP, and GVRP In the Bridge Configuration window, you can enable or disable Traffic Classes, GMRP and GVRP (if supported) at the device-level: 1. Use the drop-down list in the Traffic Classes Desired field and select Enable or Disable. 2. Use the drop-down list in the GMRP Desired field and select Enable or Disable. 3. Use the drop-down list in the GVRP Desired field and select Enable or Disable. 4. Click on the Apply button to set the changes, or the Cancel button to close the Bridge Extension Configuration window without incorporating any changes. Setting VLAN Parameters and Operational Modes The VLAN Configuration window allows you to view, create, modify, delete, enable, and disable VLANs on the module. To launch the window: 1. In the Device View, select Bridge Extension Configuration... from the Device menu. 2. In the Bridge Extension Configuration window, click on the VLAN button and select VLAN Configuration... from the menu. The VLAN Configuration window, Figure 2-25, appears. 2-84 Managing the Module The Device View Figure 2-29. The VLAN Config Window The Configured VLANs table displays the following information about VLANs configured on the module: VLAN ID Displays the unique number that identifies the VLAN. Allowable values range from 2 to 4094. VLAN ID 1 is reserved for the default VLAN. VLAN FDB ID Displays the unique number that identifies the VLAN’s Filtering Database (FDB). VLAN Name Displays the name (up to 32 characters) assigned to the VLAN. Type Displays the VLAN type: permanent (the VLAN is active and will remain so after the next reset of the device), dynamicGVRP (the VLAN is active and will remain so until removed by GVRP), or other (the VLAN is active, but is not permanent or dynamic GVRP). Status Displays the current status of the selected VLAN: Enabled (active), Disabled (not active), or Other (created but turned off or in the process of being created). Managing the Module 2-85 The Device View Creating and Modifying VLANs The fields immediately below the Configured VLANS table are used to create and modify your VLANs. To create a new VLAN: 1. In the VLAN ID field, enter a unique value between 2-4094. VLAN ID 1 is reserved for the Default VLAN, and cannot be used. 2. Enter a name for the VLAN in the VLAN Name field. VLAN names must be 32 characters or less. 3. Click the Apply button. The new VLAN will be added to the Configured VLANs table. Once a VLAN has been created, its VLAN ID cannot be modified. If you wish to change a VLAN’s ID, you’ll have to delete the VLAN and create a new entry. See Deleting VLANs, below, for instructions on deleting a VLAN. To modify an existing VLAN’s name, select its entry in the Configured VLANs table. The selected VLAN’s name will be displayed in the VLAN Name field. Modify the displayed name as outlined in Steps 2-3, above. Deleting VLANs The VLAN Configuration window also allows you to delete VLANs (except for the Default VLAN, which cannot be deleted). When a VLAN is deleted, any ports assigned to that VLAN will automatically become members of the Default VLAN. To delete a VLAN: 1. Click to select the desired VLAN entry in the Configured VLANs table. 2. Click the Delete button. The selected VLAN will be removed. Enabling and Disabling VLANs To enable or disable VLANs: 1. Select the desired VLAN entry in the Configured VLANs table. 2. In the Status field, click to select Enable or Disable. 3. Click the Apply button. The selected VLAN will be enabled or disabled, depending on your selection. Updating VLAN Configuration Window Information Clicking the Refresh button will update the information displayed in the Configured VLANs table without closing the window. 2-86 Managing the Module The Device View Configuring Basic VLAN Port Parameters VLAN port assignment and egress state configuration is performed using the VLAN Port Configuration (Basic) window, which is accessed from the Bridge Extension window. You can also use this window to access Advanced VLAN Port parameters using the Advanced button at the bottom of the window. To launch the window: 1. In the Device View, select Bridge Extension Configuration... from the Device menu. 2. In the Bridge Extension Configuration window, click on the VLAN button and select VLAN Port Configuration... from the menu. The VLAN Port Configuration (Basic) window, Figure 2-26, appears: Figure 2-30. The VLAN Port Configuration (Basic) Window The window displays the following information: Port Displays the number that identifies the port. Managing the Module 2-87 The Device View Port VLAN ID Displays the VLAN ID of the VLAN assigned to the port. When you assign a VLAN to a port, that VLAN’s ID (VID) becomes the Port VLAN ID (PVID) for the port. Endpoints connected to the port become members of that VLAN. All untagged frames received on the port are tagged with the PVID, unless a classification rule exists for the frame’s classification type. VLAN Name Displays the name (up to 32 characters) assigned to the selected VLAN. Egress State Displays the current egress state for the port: No Egress (frames are not forwarded out the port), Tagged (only tagged frames are forwarded out the port), Untagged (only untagged frames are forwarded out the port). NOTE In order to properly configure the Egress state for backplane ports, the Auto VLAN Backplane Configuration option should be set to disabled. This option is available via local management. If the option is set to enabled, the backplane ports cannot be set to No Egress via Element Manager. Assigning VLAN Membership to Ports To assign a port to any configured VLAN: 1. In the table, click to select a port that you wish to assign to a VLAN. The port’s current VLAN configuration information, including its VLAN ID, will be displayed in the fields below. 2. In the VLAN ID field, use the drop-down list to select the VLAN ID of the VLAN to which you wish to assign the selected port. 3. Click the Apply button. The new VLAN assignment will be reflected in the VLAN Port Configuration (Basic) window’s table. Setting a Port’s Egress State To set a port’s egress state: 1. In the table, click to select the port whose egress state you wish to set. The port’s current VLAN configuration information, including its egress state, will be displayed in the fields below. 2. Use the Egress State drop-down list to specify the egress state for the selected port: No Egress (frames are not forwarded out the port), Tagged (only tagged frames are forwarded out the port), Untagged (only untagged frames are forwarded out the port). 2-88 Managing the Module The Device View 3. Click the Apply button. The new egress state will be reflected in the VLAN Port Configuration (Basic) window’s table. NOTE In order to properly configure the Egress state for backplane ports, the Auto VLAN Backplane Configuration option should be set to disabled. This option is available via local management. If the option is set to enabled, the backplane ports cannot be set to No Egress via Element Manager. Updating VLAN Port Configuration Information Clicking the Refresh button will update the information displayed in the Port Configuration table without closing the window. Configuring Advanced VLAN Port Parameters VLAN port configuration including Acceptable Frame Types, Ingress Filtering, and GVRP status, is performed using the VLAN Port Configuration (Advanced) window, which is accessed from the VLAN Port Configuration (Basic) window. To launch the window: 1. In the Device View, select Bridge Extension Configuration... from the Device menu. 2. In the Bridge Extension Configuration window, click on the VLAN button and select VLAN Port Configuration... from the menu. 3. At the bottom of the VLAN Port Configuration window, click the Advanced button. The VLAN Port Configuration (Advanced) window, Figure 2-31, appears: Managing the Module 2-89 The Device View Figure 2-31. The VLAN Port Configuration (Advanced) Window The window displays the following information: Port Displays the number that identifies the port. Port VLAN ID Displays the VLAN ID of the VLAN assigned to the port. When you assign a VLAN to a port, that VLAN’s ID (VID) becomes the Port VLAN ID (PVID) for the port. Endpoints connected to the port become members of that VLAN. All untagged frames received on the port are tagged with the PVID, unless a classification rule exists for the frame’s classification type. VLAN Name Displays the name (up to 32 characters) assigned to the selected VLAN. Current Egress State Displays the current egress state for the selected port: No Egress (frames are not forwarded out the port), Tagged (only tagged frames are forwarded out the port), Untagged (only untagged frames are forwarded out the port). Static Egress State Displays the desired egress state for the port, No Egress, Tagged, or Untagged, as selected using the drop-down list in the Egress field at the bottom of the window. 2-90 Managing the Module The Device View In this release, the Static Egress State will not update until you click the Apply button. NOTE Acceptable Frame Types Displays a port’s Acceptable Frame Types setting: admitAll (the port accepts both tagged and untagged frames), admitOnlyVlanTagged (the port accepts only tagged frames) or No Capability (the port does not support this functionality). Ingress Filtering Displays whether the port is performing Ingress Filtering. Ports performing Ingress Filtering will discard any frame received whose VLAN classification is not on the port’s egress list. GVRP Status Displays whether GVRP (GARP VLAN Registration Protocol) is currently enabled or disabled on the port. GVRP is a protocol used to dynamically add VLANs to port egress lists across a domain. Ports that do not support this functionality will display N/A. GVRP Failed Registration Displays the total number of failed GVRP registrations for all VLANs on the port. Ports that do not support this functionality will display N/A. GVRP Last PDU Origin Displays the source MAC Address of the last GVRP message (PDU, Protocol Data Unit) received on the port. Ports that do not support this functionality will display N/A. Assigning VLAN Membership to a Port To assign a port to any configured VLAN: 1. In the table, click to select a port that you wish to assign to a VLAN. The port’s current VLAN configuration information, including its VLAN ID, will be displayed in the fields below. 2. In the VLAN ID field, click to select the VLAN ID of the VLAN to which you wish to assign the selected port. 3. Click the Apply button. The new VLAN assignment will be reflected in the VLAN Port Configuration (Advanced) window’s table. Managing the Module 2-91 The Device View Setting a Port’s Egress State To set a port’s egress state: 1. In the table, click to select the port whose egress state you wish to set. The port’s current VLAN configuration information, including its egress state, will be displayed in the fields below. 2. Use the Egress State drop-down list to specify the egress state for the selected port: No Egress (frames are not forwarded out the port), Tagged (only tagged frames are forwarded out the port), Untagged (only untagged frames are forwarded out the port). 3. Click the Apply button. The new egress state will be reflected in the VLAN Port Configuration (Advanced) window’s table. NOTE In order to properly configure the Egress state for backplane ports, the Auto VLAN Backplane Configuration option should be set to disabled. This option is available via local management. If the option is set to enabled, the backplane ports cannot be set to No Egress via Element Manager. Setting a Port’s Acceptable Frame Types To set a port’s Acceptable Frame Types: 1. Select the desired port in the table: 2. Use the Acceptable Frame Types drop-down list to select: admitAll (the port accepts both tagged and untagged frames), or admitOnlyVlanTagged (the port accepts only tagged frames). If the port does not support this functionality, the field will be grayed out. 3. Click the Apply button. The new state will be reflected in the VLAN Port Configuration (Advanced) window’s table. Configuring Ingress Filtering To configure Ingress Filtering on a port: 1. Select the desired port in the table: 2. Use the Ingress Filtering drop-down list to specify whether the port will perform Ingress Filtering: Yes or No. 3. Click the Apply button. The new state will be reflected in the VLAN Port Configuration (Advanced) window’s table. 2-92 Managing the Module The Device View Configuring GVRP To enable or disable GVRP (GARP VLAN Registration Protocol) on a port: 1. Select the desired port in the table: 2. Use the GVRP drop-down list to specify whether GVRP will be enabled on the port. GVRP is a protocol used to dynamically add VLANs to port egress lists across a domain. If the device does not support GVRP, this field will be grayed out. 3. Click the Apply button. The new state will be reflected in the VLAN Port Configuration (Advanced) window’s table. Updating VLAN Port Configuration Information Clicking the Refresh button will update the information displayed in the Port Configuration table without closing the window. Performing Egress List Configuration Ports can transmit traffic for any or all defined VLANs on your network as long as the VLANs are on the port’s egress list. Use the VLAN Egress Port Configuration window to determine which VLANs are on each port’s egress list. To launch the window: 1. In the Device View, select Bridge Extension Configuration... from the Device menu. 2. In the Bridge Extension Configuration window, click on the VLAN button and select VLAN Egress Port Configuration... from the menu. The VLAN Egress Port Config window, Figure 2-27, appears: Managing the Module 2-93 The Device View Figure 2-32. The VLAN Egress Port Config Window The Selected VLAN table at the top of this window lists the VLANs currently configured on the device. You can select a VLAN from this list to associate with the egress lists on the device’s ports. The Selected VLAN table includes the following information: VLAN ID The unique identifier for the VLAN. VLAN Name The name assigned to the VLAN. Type Displays the VLAN type: permanent (the VLAN is active and will remain so after the next reset of the device), dynamicGVRP (the VLAN is active and will remain so until removed by GVRP), or other (the VLAN is active, but is not permanent or dynamic GVRP). 2-94 Managing the Module The Device View Status Displays the current status of the selected VLAN: Enabled (active), Disabled (not active), or Other (created but turned off or in the process of being created). The Port Egress Information table lists the ports whose egress lists contain the selected VLAN. You can use this list to change how frames belonging to the selected VLAN will be forwarded out a port. Port Displays the number that identifies the port. Tagging Displays whether the port is implementing the 802.1Q VLAN functionality of tagging frames and GVRP (GARP VLAN Registration Protocol). Current Displays the current egress state for the port. The egress state specifies how frames belonging to the selected VLAN are forwarded out the port: No Egress (frames will not be transmitted), Tagged (frames will be transmitted as tagged), or Untagged (frames will be transmitted as untagged). Static Displays the desired egress state for the port: No Egress (frames will not be transmitted), Tagged (frames will be transmitted as tagged), or Untagged (frames will be transmitted as untagged). Right-mouse click on the port to select the desired egress state from the menu. Configuring Egress State To configure the egress state (how frames will be transmitted) for the ports on the module: 1. In the Selected VLAN table at the top of the VLAN Egress Port Configuration window, click to select a VLAN. The ports that contain this VLAN in their egress lists are displayed in the lower portion of the window. 2. In the Port Egress Information list, right-click the desired port, and select the egress state: No Egress (frames will not be transmitted), Tagged (frames will be transmitted as tagged), or Untagged (frames will be transmitted as untagged). To change the egress state for all the ports listed, right-click a port and select All No Egress, All Tagged, or All Untagged. 3. Repeat for another VLAN, if desired. 4. Click Apply to set the change(s). NOTE In order to properly configure the Egress state for backplane ports, the Auto VLAN Backplane Configuration option should be set to disabled. This option is available via local management. If the option is set to enabled, the backplane ports cannot be set to No Egress via Element Manager. Managing the Module 2-95 The Device View Setting Port Priority You can set the default Ingress User Priority for each port using the Bridge Extension Port Priority window. Priority is a value between 0 and 7 assigned to each frame, with 7 being the highest priority. Priority is used to assign frames transmission priority over other frames. Frames assigned higher priority are transmitted before frames with a lower priority. If a frame received on a port does not have a priority assigned to it (and no priority classification rule exists), it is assigned the default Ingress User Priority. The Port Priority window also displays the number of traffic classes (queues) supported for each port. To launch the window: 1. In the Device View, select Bridge Extension Configuration... from the Device menu. 2. In the Bridge Extension Configuration window, click on the Priority button and select Priority... from the menu. The Bridge Extension Port Priority window, Figure 2-33, appears: Figure 2-33. The Bridge Extension Port Priority Window The Port Priority window displays the following information: Port Displays the number that identifies the port. 2-96 Managing the Module The Device View Default Ingress User Priority Displays the default Ingress User Priority assigned to the port. Priority is used to assign frames transmission priority over other frames. Priority is a value between 0 and 7 assigned to each frame, with 7 being the highest priority. Number of Egress Traffic Classes Displays the number of egress Traffic Classes (queues) supported by the port. Setting Default User Priority To set default user priority on a port: 1. Select the desired port in the table, or use the drop-down list in the Port field to select the desired port. 2. Use the drop-down list in the Default Ingress User Priority field to select the priority you want to assign. 3. Click the Apply button. Updating Port Priority Information Clicking the Refresh button will update the information displayed in the Port Priority table without closing the window. Setting Port Priority-to-Traffic Class Mapping You can set the priority-to-traffic class mapping for each port using the Bridge Extension Port Traffic Class window. Switches transmit frames based on the frame’s transmission priority. Priority is a value between 0 and 7 assigned to each frame with 7 being the highest priority. Frames assigned a higher priority are transmitted before frames with a lower priority. A switch maps each priority number to a specific traffic class (queue number), and transmits frames based on what queue they are in. Frames in the highest numbered queue are transmitted out a port first. The window displays the number of traffic classes supported by each port and allows you to map a priority to a specific traffic class. To launch the window: 1. In the Device View, select Bridge Extension Configuration... from the Device menu. 2. In the Bridge Extension Configuration window, click on the Priority button and select Traffic Class... from the menu. The Bridge Extension Port Traffic Class window, Figure 2-34, appears: Managing the Module 2-97 The Device View Figure 2-34. The Bridge Extension Port Traffic Class Window The Port Traffic Class window displays the following information: Port Displays the number that identifies the port. Priority Priority is a value between 0 and 7 with 7 being the highest priority. Switches transmit frames based on the frame’s transmission priority. Frames assigned a higher priority are transmitted before frames with a lower priority Priority is mapped to a specific class (queue number), and frames are transmitted based on what queue they are in. Frames in the highest numbered queue are transmitted out a port first. Num. Traffic Classes (queues) Displays the number of Traffic Classes (queues) supported by that port. Traffic Class (queue number) Displays the Traffic Class mapped to the port priority. Priority is mapped to a specific Traffic Class (queue number), and frames are transmitted based on what queue they are in. Frames in the highest numbered queue are transmitted out a port first. 2-98 Managing the Module The Device View Mapping Port Priority to Traffic Class To map a port priority to a traffic class: 1. Select the desired port in the Port Traffic Class table. 2. Use the Traffic Class field drop-down list to select the desired traffic queue. Matrix E5 modules support two (0-1) traffic queues. 3. Click the Apply button. Updating Port Traffic Class Information Clicking the Refresh button will update the information displayed in the Port Traffic Class table without closing the window. Setting GARP Times Use the Bridge Extension Port GARP Times window to configure Generic Attribute Registration Protocol (GARP) times for each port. GARP is a protocol that is used to propagate port state and/or user information throughout a switched network. GARP time values are used by all GARP applications running on the device (e.g. GVRP and GMRP). Matrix E5 modules do not currently support GARP. NOTE To launch the window: 1. In the Device View, select Bridge Extension Configuration... from the Device menu. 2. In the Bridge Extension Configuration window, click on the Priority button and select GARP Times... from the menu. The Bridge Extension Port GARP Times window, Figure 2-35, appears: Managing the Module 2-99 The Device View Figure 2-35. The Bridge Extension Port GARP Times Window The Port GARP Times window displays the following information: Port Displays the number that identifies the port. Join Time Displays the Join Time configured for the port. Join Time is the maximum time period of GARP PDU transmits (to register for an attribute). Leave Time Displays the Leave Time configured for the port. Leave Time is the period of time from which an attribute is registered as not required (leaving), to not present (empty). Leave All Time Displays the Leave All Time configured for the port. This is the period of time at which Leave All PDUs are generated, which force the recipients to respond by registering for their active attributes. 2-100 Managing the Module The Device View Configuring Port GARP Times To configure port GARP times: 1. Select the port in the table or use the drop-down list in the Port field and select the desired port. 2. In the Join Time field, enter the amount of time in centiseconds. 3. In the Leave Time field, enter the amount of time in centiseconds. 4. In the Leave All Time field, enter the amount of time in centiseconds. 5. Click the Apply button to set the changes. Updating Port GARP Times Information Clicking the Refresh button will update the information displayed in the Port GARP Times table without closing the window. Configuring GMRP Status Use the Bridge Extension Port GMRP window to configure whether GMRP (GARP Multicast Registration Protocol) is enabled or disabled on each port. GMRP is a protocol used to register multicast addresses on ports to control flooding of multicast frames. Matrix E5 modules do not currently support GMRP. NOTE To launch the window: 1. In the Device View, select Bridge Extension Configuration... from the Device menu. 2. In the Bridge Extension Configuration window, click on the Priority button and select GMRP... from the menu. The Bridge Extension Port GMRP window, Figure 2-36, appears: Managing the Module 2-101 The Device View Figure 2-36. The Bridge Extension Port GMRP Window The Port GMRP window displays the following information: Port Displays the number that identifies the port. Status Displays whether GMRP (GARP Multicast Registration Protocol) is disabled or enabled on the port. GMRP Failed Registration Displays the total number of failed GMRP registrations for all VLANs on the port. GMRP Last PDU Origin Displays the source MAC Address of the last GMRP message (PDU, Protocol Data Unit) received on the port. 2-102 Managing the Module The Device View Enabling or Disabling GMRP To enable or disable GMRP on each port: 1. Select the port in the table or use the drop-down list in the Port field and select the desired port. 2. Use the drop-down list in the GMRP Status field and select the desired action: Enable or Disable. 3. Click the Apply button to set the changes. Updating Port GMRP Information Clicking the Refresh button will update the information displayed in the Port GMRP table without closing the window. Setting the Device Date and Time The Device menu provides the options that allow you to change the date and time stored in the device’s internal clock: Edit Device Time and Edit Device Date. To edit the device time: 1. Click on Device on the Device View menu bar to access the Device menu. Click on Edit Device Time. 2. The Device Time change window, Figure 2-37, will appear. Figure 2-37. The Device Time Window 3. Enter the new time in a 24-hour hh:mm:ss format, either by highlighting the field you wish to change and using the up and down arrow buttons, or by simply entering the new value in the appropriate field. 4. Click on the OK button to save your changes, or on the Cancel button to exit without changes. Managing the Module 2-103 The Device View To edit the device date: 1. Click on Device on the Device View menu bar to access the Device menu. Click on Edit Device Date. 2. The Device Date change window, Figure 2-38, will appear. Figure 2-38. The Device Date Window 3. Enter the new date in a mm/dd/yyyy format, either by highlighting the field you wish to change and using the up and down arrow buttons, or by simply entering the new value in the appropriate field. 4. Click on the OK button to save your changes, or on the Cancel button to exit without changes. NOTE In accordance with Year 2000 compliance requirements, NetSight Element Manager now displays and allows you to set all dates with four-digit year values. Enabling and Disabling Ports When you disable bridging at a port interface, you disconnect that port’s network from the bridge entirely. The port does not forward any packets, nor does it participate in Spanning Tree operations. Nodes connected to the network can still communicate with each other, but they can’t communicate with the bridge or with other networks connected to the bridge. When you enable bridging for the interface, the port moves from the Disabled state through the Listening and Learning states to the Forwarding state; bridge port state color codes will change accordingly. NOTE You cannot disable a backplane interface from the Device Logical View — since the backplane interfaces do not appear in the port stack. You must use the Device BackPlane Config View to disable the interfaces to the 6C105/6C107 backplane. To enable or disable bridging for an individual interface: 2-104 Managing the Module The Device View 1. Click on the appropriate port display box to display the port menu. 2. Drag down to select Enable to enable bridging at the interface, or Disable to disable bridging. Bridging will now be enabled or disabled across the selected port, as desired. To enable or disable bridging for all interfaces installed on the monitored SmartSwitch 6000 or Matrix E7 module: 1. Click on the module index of interest to display the Module menu. 2. Drag down to select Enable Bridge to enable bridging at all installed interfaces, or Disable Bridge to disable bridging across all interfaces. Bridging will now be enabled or disabled across the installed interfaces, as desired. NOTE For more information about bridging functions and how to determine the current state of each bridge port, see the Bridging chapter in the Element Manager Tools Guide. Managing the Module 2-105 The Device View 2-106 Managing the Module Chapter 3 Statistics Accessing interface statistics from the Device View; available statistics windows Each port menu in the Device View window provides two statistics selections: Statistics and I/F Statistics. Selecting the Statistics option will launch the highest level of statistics available for the selected interface: if the interface supports RMON, the RMON statistics window will display; if the interface does not support RMON, or if the RMON Default MIB component has been administratively disabled, the MIB-II I/F Statistics window will display. Selecting the I/F Statistics option will always display MIB-II interface statistics, regardless of the level of RMON support available or the current administrative status of the RMON Default MIB component. TIP Note that the MIB-II I/F Statistics window is also available for all port interfaces — regardless of their level of RMON support or the current administrative status of the RMON Default MIB component — via the I/F Summary window accessed from the Device menu, and via the I/F Statistics option on the Bridge Port menu in the Bridge Status view. For more information about the I/F Summary window, see Chapter 2, The Device View; for more information about the Bridge Status view, see the Element Manager Tools Guide. Accessing the Statistics Windows 1. Click on the desired port index in the Device View window. The Port menu will appear. 2. For RMON statistics (where available), click to select Statistics, and release. The RMON Statistics (Figure 3-1) or MIB-II I/F Statistics (Figure 3-3) window, as appropriate, will appear. or For MIB-II interface statistics, click to select I/F Statistics, and release. The MIB-II I/F Statistics window (Figure 3-3) will appear. 3-1 Statistics NOTE If the selected interface displays MIB-II I/F Statistics and you were expecting to see RMON statistics, the RMON Default MIB component may be disabled; see the RMON User’s Guide for information on how to check (and if necessary, change) the admin status of the RMON Default MIB component. RMON Statistics The RMON Ethernet Statistics window (Figure 3-1) provides a detailed statistical breakdown of traffic on the monitored Ethernet network. Statistics are provided in both numerical and graphic format, and include peak values and the date and time they occurred. The Errors pie chart will only be displayed when the % of Tot. Errors option is selected. Figure 3-1. The Ethernet Statistics Window 3-2 RMON Statistics Statistics The selected interface number and its description are displayed at the top of the Statistics window. The column on the left side of the window displays each statistic’s name, total count, and percentage; the column on the right displays the peak value for each statistic, and the date and time that peak occurred. Note that peak values are always Delta values; see Viewing Total, Delta, and Accumulated Statistics, on page 3-5, for more information. Ethernet statistics are: Bytes Displays the total number of bytes contained in packets processed on the network segment. This number includes bytes contained in error packets. Packets Displays the total number of packets processed on the network segment. Again, this number includes error packets. Drop Events This field indicates the number of times packets were dropped because the device could not keep up with the flow of traffic on the network. Note that this value does not reflect the number of packets dropped, but only the number of times packets were dropped. % Load Displays the network segment load during the sample interval, in hundredths of a percent; this percentage reflects the network segment load compared to the theoretical maximum load (10 Mbps) of an Ethernet network. Packet Type Multicast Indicates the number of good packets processed on the network segment that were destined for more than one address. Note that this total does not include broadcast packets. Broadcast Indicates the number of good packets processed on the network segment that had the broadcast (FF-FF-FF-FF-FF-FF) destination address. Unicast Indicates the number of good packets processed on the network segment that were destined for a single address. The percentages displayed to the right of the numerical values for these fields indicate what percentage of good packets transmitted on the network segment were multicast, broadcast, and unicast; these percentages will add up to 100. The pie chart in the center of the window provides a graphical view of the percentage breakdown; colors in the pie chart correspond to colors in the percentage display boxes. Values listed to the right of the pie chart indicate peak delta values recorded since the statistics screen was launched, and the date and time they occurred. RMON Statistics 3-3 Statistics Problems CRC/Alignment Indicates the number of packets processed by the network segment that had a non-integral number of bytes (alignment error) or a bad frame check sequence (Cyclic Redundancy Check, or CRC error). Fragments Indicates the number of packets processed by the network segment that were undersized (less than 64 bytes in length; a runt packet) and had either a non-integral number of bytes (alignment error) or a bad frame check sequence (CRC error). Jabbers Indicates the number of packets processed by the network segment that were oversized (greater than 1518 bytes; a giant packet) and had either a non-integral number of bytes (alignment error) or a bad frame check sequence (CRC error). Collisions Indicates the total number of receive (those the device detects while receiving a transmission) and transmit (those the device detects while transmitting) collisions detected on the network segment. Undersized Indicates the number of packets processed by the network segment that contained fewer than 64 bytes (runt packets) but were otherwise well-formed. Oversized Indicates the number of packets processed by the network segment that contained more than 1518 bytes (giant packets) but were otherwise well-formed. In their default state, the percentages displayed to the right of the numerical values for these fields indicate what percentage of total packets transmitted on the network segment were of the noted type. If you select the % of Tot. Errors option by clicking the mouse in the check box, the percentages will indicate what percentage of problem, or error, packets transmitted on the network segment were of the noted type; these percentages will add up to 100. (The % of Tot. Errors option is active if there is a checkmark in the check box.) The pie chart in the center of the window provides a graphical view of the selected percentage breakdown; colors in the pie chart correspond to colors in the percentage display boxes. Values listed to the right of the pie chart indicate peak delta values recorded since the statistics screen was launched, and the date and time they occurred. Frame Size (Bytes) Packets The Frame Size (Bytes) Packets fields indicate the number of packets (including error packets) processed by the network segment that were of the noted length, excluding framing bits but including frame check sequence bits. Packet sizes counted are: • • • • • • 3-4 64 65-127 128-255 256-511 512-1023 1024-1518 RMON Statistics Statistics The percentages displayed to the right of the numerical values for these fields indicate what percentage of all packets transmitted on the network segment were of the noted size. Unless the network segment has experienced a significant number of runts and/or giants (which are not counted in this group), these percentages will add up to 100. The pie chart in the center of the window provides a graphical view of the percentage breakdown; colors in the pie chart correspond to colors in the percentage display boxes. Values listed to the right of the pie chart indicate peak delta values recorded since the statistics screen was launched, and the date and time they occurred. Viewing Total, Delta, and Accumulated Statistics By using the Total, Delta, and Accum option buttons located at the bottom of each Statistics window, you can choose whether to view the total statistics count (since the last time the device was initialized), the statistics count during the last polling interval, or a fresh accumulation of statistics begun when the Accum button was selected. TIP The statistics windows use the polling interval you have set for the monitored device via the Device Management page of the Options window. See your Element Manager User’s Guide for more information on setting the Chassis Manager polling interval. To choose Total, Delta, or Accum: 1. Click on the Total option button; after the completion of the current polling cycle plus one complete polling cycle, the screen will display the total count of statistics processed since the entry was created or since the device was last initialized, whichever is most recent. These totals are updated after each polling cycle. 2. Click on the Delta option button; after the completion of the current polling cycle plus two more polling cycles, the screen will display the count of statistics processed during the last polling interval. These counts will be refreshed after each polling cycle. 3. Click on the Accum option button; after the completion of the current polling cycle plus two more polling cycles, the screen will display a fresh cumulative count of statistics. Note that making this selection does not clear device counters; you can still re-select Total for the total count since the device was last initialized. Note that switching the statistics displays among Total, Delta, and Accum does not effect the displayed peak values, as peak values are always Delta values. NOTE RMON Statistics If you reset your device, you must first close, then re-open the Statistics window to refresh peak values. 3-5 Statistics To temporarily freeze the statistics display, select the Freeze Stats option; in this mode, statistics will continue to be collected, but the display will not update. To resume normal updates, click again to de-select the freeze option. Printing Statistics The Print button located at the bottom of the Statistics window allows you to print the current snapshot of statistical data. When you select Print, a standard Windows Print window like the sample shown in Figure 3-2 will appear. Figure 3-2. Standard Print Window Adjust printer settings as required, then click the OK button. (For more information on the appropriate printer settings, consult your Microsoft User’s Guide.) 3-6 RMON Statistics Statistics Interface Statistics The interface I/F Statistics window (Figure 3-3) provides MIB-II interface statistical information — including counts for both transmit and receive packets, and error and buffering information — for the front panel interfaces on the SmartSwitch 6000 or Matrix E7 series chassis. Color-coded pie charts in the middle of the window let you graphically view statistics for Unicast, Non-Unicast, Discarded and Error packets. TIP Remember, this window can always be launched from the I/F Statistics option on the Device View port menus; it may also be launched from the Statistics option if the selected interface does not support RMON or if the RMON Default MIB component has been administratively disabled. This window is also available for all port interfaces via the I/F Summary window (described in Chapter 2, The Device View) or the Bridge Port menus in the Bridge Status view (see the Element Manager Tools Guide). To access the interface’s I/F Statistics window: 1. In the Device View window, click on the appropriate port interface to display the Port menu. 2. Click on I/F Statistics. The MIB-II I/F Statistics window will appear. Figure 3-3. The Interface Statistics Window Interface Statistics 3-7 Statistics Three informational fields appear in the upper portion of the window: Description Displays the interface description for the currently selected interface (e.g., Enterasys Enet Port, Enterasys Fast Enet Port, FDDI, ATM, or Enterasys Backplane Port). Address Displays the MAC (physical) address of the selected interface. Type Displays the interface type of the selected port: ethernet-csmacd, fddi, or atm. The lower portion of the window provides the following transmit and receive statistics; note that the first four statistics are also graphically displayed in the pie charts. Unicast Displays the number of packets transmitted to or received from this interface that had a single, unique destination address. These statistics are displayed in the pie chart, color-coded green. Non-Unicast Displays the number of packets transmitted to or received from this interface that had a destination address that is recognized by more than one device on the network segment. The multicast field includes a count of broadcast packets — those that are recognized by all devices on a segment. These statistics are displayed in the pie chart, color-coded dark blue. Discarded Displays the number of packets which were discarded even though they contained no errors that would prevent transmission. Good packets are typically discarded to free up buffer space when the network becomes very busy; if this is occurring routinely, it usually means that network traffic is overwhelming the device. To solve this problem, you may need to re-configure your bridging parameters, or perhaps re-configure your network to add additional bridges or switches. Consult the Enterasys Network Troubleshooting Guide for more information. These statistics are displayed in the pie chart, color-coded magenta. Error Displays the number of packets received or transmitted that contained errors. These statistics are displayed in the pie chart, color-coded red. Unknown Protocol (Received only) Displays the number of packets received which were discarded because they were created under an unknown or unsupported protocol. Packets Received (Received only) Displays the number of packets received by the selected interface. 3-8 Interface Statistics Statistics Transmit Queue Size (Transmit only) Displays the number of packets currently queued for transmission from this interface. The amount of device memory devoted to buffer space, and the traffic level on the target network, determine how large the output packet queue can grow before the SmartSwitch 6000 or Matrix E7 module will begin to discard packets. Packets Transmitted (Transmit only) Displays the number of packets transmitted by this interface. Making Sense of Interface Statistics The statistics available in this window can give you an idea of how an interface is performing; by using the statistics in a few simple calculations, it’s also possible to get a sense of an interface’s activity level: To calculate the percentage of input errors: Received Errors /Packets Received To calculate the percentage of output errors: Transmitted Errors /Packets Transmitted To calculate the total number of inbound and outbound discards: Received Discards + Transmitted Discards To calculate the percentage of inbound packets that were discarded: Received Discards /Packets Received To calculate the percentage of outbound packets that were discarded: Transmit Discards /Packets Transmitted Interface Statistics 3-9 Statistics 3-10 Interface Statistics Chapter 4 Alarm Configuration Accessing the Basic and Advanced Alarms windows; creating a basic alarm; creating an advanced alarm; creating events; assigning actions to events; viewing the event log Through the RMON Alarm and Event functionality supported by your SmartSwitch 6000 or Matrix E7 series module, you can configure alarms and events (and, where appropriate, actions) for each available interface. TIP The Alarm, Event, and Actions windows described in this chapter are identical to those provided via the RMON utility. For more information about other features of RMON, see the Element Manager RMON User’s Guide. About RMON Alarms and Events Although Alarms and Events are defined as separate RMON groups, neither one can function properly without the other: you can define an alarm threshold, but if it doesn’t point to an event, there will be no indication that the threshold has been crossed; similarly, you can define an event, but unless it is attached to an alarm threshold, it won’t be triggered. Each is an essential part of the same notification process: the alarm defines a set of conditions you want to know about, and the event determines the means of letting you know those conditions have occurred. Events are also an integral part of the filter and packet capture functionality: you can start and stop packet capturing in response to events, or a successful packet capture can generate its own event. NetSight Element Manager provides two means for configuring RMON alarms: using the Basic Alarms window, you can define both rising and falling alarm thresholds for up to three pre-selected MIB-II variables per interface; based on the options you select, the application automatically creates the necessary events (to log alarm occurrences, generate a trap, or both) and — for devices which support the Actions MIB — adds the requested actions to those events (to enable or disable bridging at the selected interface). 4-1 Alarm Configuration Using the Advanced Alarms feature, you can define custom alarms for almost any MIB-II or RMON object, as long as it is present in the device firmware and its value is defined as an integer (including counters, timeticks, and gauges). All aspects of these alarms are user-selectable: thresholds can be established on either the absolute or delta value for a variable; events can be configured to create a log, generate a trap, or both; and for devices that support the Actions MIB, events can also be configured to perform any defined SNMP SET or series of SETs on device objects. The Advanced Alarms feature also allows you to configure any events you wish to use in conjunction with the Packet Capture functionality. (For more information on using the Packet Capture feature, see the RMON User’s Guide.) The Basic Alarms feature allows you to assign alarms to any interface type; using the Advanced Alarms feature, you need only be sure to select variables appropriate to the interface — e.g., Ethernet for Ethernet — when defining your alarms. TIP As long as there is at least one Ethernet or Fast Ethernet module installed in your SmartSwitch 6000 or Matrix E7 chassis, you can use the RMON Alarms feature to configure alarms for MIB objects on FDDI, ATM, and other interfaces that don’t specifically support RMON: the Basic Alarms window provides MIB II objects as alarm variables; Advanced Alarm configuration allows you to select any object as an alarm variable, as long as its value is defined as an integer and you assign the correct instance value. See step 5 on page 4-19 and the Note which follows it for more information on assigning the correct instance value to an advanced alarm. Basic Alarm Configuration Using the Basic Alarm Configuration application, you can define both rising and falling alarm thresholds for three selected MIB-II objects: ifInOctets, ifInNUcastPkts, and ifInErrors. Because these pre-selected objects are not RMON-specific, you can configure alarms for all interfaces installed in your SmartSwitch 6000 or Matrix E7 series module — including those, like FDDI, for which no specific RMON statistics currently exist. In addition to configuring separate rising and falling thresholds, you can also configure your device’s response to an alarm condition. When a threshold is crossed, the RMON device can create a log of alarm events, send a trap notifying your management workstation that an alarm condition has occurred, or both. You can even configure an alarm to enable or disable bridging on the offending port in response to a rising or falling alarm condition. TIP 4-2 If you are familiar with the RMON MIB and/or with the original Alarm and Event functionality provided by NetSight Element Manager (now known as the Advanced Alarm functionality), you will note that the Basic Alarm Configuration window combines the three parts of creating a working alarm — configuring the alarm itself, configuring an event that will announce the occurrence of an alarm (including assigning any actions), and linking the two — into a single step, and handles the details transparently. For more information about the individual steps involved in creating an alarm, see Advanced Alarm Configuration, on page 4-11. Basic Alarm Configuration Alarm Configuration Accessing the Basic Alarm Configuration Window To access the RMON Basic Alarm Configuration window: 1. From the Device View, click on the appropriate port index to display the Port menu. 2. Drag down to Alarm Configuration, and release. The Basic Alarm Configuration window, Figure 4-1 on the following page, will appear. When the window is first launched, no interfaces will be selected, and the Apply, Disable, and View Log buttons will be grayed out. The Apply and Disable buttons will activate when an interface is selected; the View Log button will activate when an interface which has experienced an alarm event is selected. The presence of an event log is indicated by the double greater-than sign (>>) displayed to the left of the threshold value that was crossed. Viewing Alarm Status The Basic Alarm Configuration window contains all the fields you need to configure one or more of the three basic alarms available for each interface installed in your RMON device: Kilobits — Total Errors — Broadcasts/Multicasts Use these fields at the top of the window to change the alarm type whose status is displayed in the list box. For example, if the Kilobits option is selected, the information in the list box pertains to the status of the Kilobits alarm type for each installed interface. Before you configure an alarm or alarms, be sure the appropriate option is selected here. The available alarm variables are: • Kilobits (ifInOctets) — tracks the number of octets of data received by the selected interface. Note that this value has been converted for you from octets (or bytes) to kilobits (or units of 125 bytes); be sure to enter your thresholds accordingly. For example, to set a rising threshold of 1250 octets, enter a threshold value of 10; to set a falling threshold of 625 octets, enter a threshold value of 5. Basic Alarm Configuration 4-3 Alarm Configuration Figure 4-1. Basic Alarm Configuration Window TIP • Total Errors (ifInErrors) — tracks the number of error packets received by the selected interface. • Broadcast/Multicast (ifInNUcastPkts) — tracks the number of non-unicast — that is, broadcast or multicast — packets received by the selected interface. Note that the three pre-selected alarm variables are all MIB II variables; this allows you to configure alarms for any installed interface — even those for which no specific RMON statistics yet exist. Port Number Provides a sequential indexing of the interfaces installed in your RMON device. IF Number Displays the interface number assigned to each available interface. 4-4 Basic Alarm Configuration Alarm Configuration IF Type Displays each interface’s type: e.g., FDDI, Ethernet, ATM. Note that there is no type distinction between standard Ethernet and Fast Ethernet. Status Displays the current status of the selected alarm type for each interface: Enabled or Disabled. Remember, this status refers only to the alarm type which is selected at the top of the window; each of the other two alarm types can have different states. Log/Trap Indicates whether or not each alarm has been configured to create a silent log of event occurrences and the alarms that triggered them, and whether or not each alarm has been configured to issue a trap in response to a rising or falling alarm condition. Possible values are log, trap, log&trap, or none. Polling Interval Displays the amount of time, in days, hours, minutes, and seconds, over which the selected alarm variable will be sampled. At the end of the interval, the sample value will be compared to both the Rising Threshold and Falling Threshold. You can set any interval up to 24,855 days. Rising Threshold Displays the high threshold value set for the selected alarm variable. Values used to compare to the thresholds are relative, or delta values (the difference between the value counted at the end of the current interval and the value counted at the end of the previous interval); be sure to set your thresholds accordingly. Rising Action These option buttons indicate whether or not a rising alarm occurrence will initiate any actions in response to the alarm condition: Enable Port if bridging will be enabled at the selected interface in response to a rising alarm, Disable Port if bridging will be disabled at the selected interface in response to a rising alarm, or None if no actions have been configured for the selected alarm. Note that the Action fields will be unavailable for devices configured to operate in SecureFast switching mode, or that do not support the Actions MIB. Falling Threshold Displays the low threshold value set for the selected alarm variable. Values used to compare to the thresholds are relative, or delta values (the difference between the value counted at the end of the current interval and the value counted at the end of the previous interval); be sure to set your thresholds accordingly. Falling Action These option buttons indicate whether or not a falling alarm occurrence will initiate any actions in response to the alarm condition: Enable Port if bridging will be enabled at the selected interface in response to a falling alarm, Disable Port if bridging will be disabled in response to a falling alarm, or None if no actions have been configured for the selected alarm. Note that the Action fields will be unavailable for devices configured to operate in SecureFast switching mode, or that do not support the Actions MIB. Basic Alarm Configuration 4-5 Alarm Configuration TIP Before you decide whether or not to assign an action to a rising or falling alarm, it is important to understand something about the hysteresis function built in to the RMON alarm functionality. See How Rising and Falling Thresholds Work, on page 4-27, for more information. The remainder of the window fields provide the means for configuring alarms for each available interface. Note that the information provided in this screen is static once it is displayed; for updated information, click on the Refresh button. Adding or modifying an alarm automatically updates the list. Creating and Editing a Basic Alarm The editable fields at the bottom of the Basic Alarm Configuration window allow you to configure alarm parameters for each available interface. These fields will display the parameters used for the most recently configured alarm (no matter which interfaces are selected in the list box); this allows you to set the same parameters on multiple interfaces with a single set. Hold down the Shift key while clicking to select a contiguous group of interfaces; use the Ctrl key to select any interfaces. To display the alarm parameters for a specific interface, double-click on that interface. Note that there is no specific “Enable” function; simply configuring thresholds and/or actions for an alarm and applying those changes enables the alarm. For details on disabling an alarm, see Disabling a Basic Alarm, on page 4-9. To configure an alarm: 1. At the top of the window, click to select the variable to be used for your alarm: Kilobits, Total Errors, or Broadcast/Multicast. The display in the list box will reflect the current status at each interface of the alarm type you have selected. 2. In the list box, click to highlight the interface (or use shift-click or ctrl-click to select multiple interfaces) for which you would like to configure an alarm for the selected variable. Note that the editable fields will display the parameters assigned to the most recently set alarm; however, any changes you make in these fields will be set to all selected interfaces. 3. In the Interval field, enter the amount of time, in days, hours, minutes, and seconds, over which the selected variable will be sampled. At the end of the interval, the sample value will be compared to both the rising and falling thresholds. You can assign any time interval up to 24,855 days. If you set an incorrect time value (e.g., you enter 75 minutes instead of 1 hour, 15 minutes) you will receive an error message. Click OK and enter the correct time value. 4-6 Basic Alarm Configuration Alarm Configuration 4. In the Alarm field, click to select one or both of the following options: a. Select Log if you wish to create a silent log of alarm occurrences. b. Select Send Trap if you want your device to issue a trap in response to each alarm occurrence. NOTES In order for the trap selection to work properly, your SmartSwitch 6000 or Matrix E7 series module must be configured to send traps to your network management station. This is accomplished via Local Management (or Remote Administration Tools) and the trap table. Consult your device hardware manual for more information. If you are monitoring a variable you consider to be critical, we do not recommend that you select Trap as the only event response; if a trap is lost due to a collision or other transmission problem, it will not be re-sent. 5. Any value you enter in the Community field will be included in any trap messages issued by your SmartSwitch 6000 or Matrix E7 series module in response to the alarm(s) you are configuring. This value is also used to direct traps related to this alarm to the appropriate management workstation(s): a. If you enter a value in this field, traps related to the associated alarms will only be sent to the network management stations in the device’s trap table which have been assigned the same community name (and for which traps have been enabled). Any IP addresses in the device’s trap table which have not been assigned the same community string, or which have been assigned no community string, will not receive traps related to the alarm(s) you are configuring. b. If you leave this field blank, traps related to the associated alarms will be sent to any network management stations which have been added to the device’s trap table, and for which traps have been enabled — regardless of whether or not those IP addresses have been assigned a community name in the trap table. TIP For more information about configuring the SmartSwitch 6000 or Matrix E7 series module’s trap table, consult your Local Management documentation or the Remote Administration Tools Guide. (Remember, no traps will be sent by your SmartSwitch 6000 or Matrix E7 series module at all unless its trap table has been properly configured!) Basic Alarm Configuration 4-7 Alarm Configuration 6. Click in the Rising Threshold field, and enter the high threshold value for this alarm. Remember, compared values are always relative, or delta values (the difference between the value counted at the end of the current interval and the value counted at the end of the previous interval); be sure to set your thresholds accordingly. Remember, too, when configuring a Kilobits alarm, NetSight Element Manager converts octets into kilobits (units of 125 bytes, or octets) for you; for example, to set a rising threshold of 1250 octets, enter a threshold value of 10. 7. In the Rising Action field, click to select the action you want your device to take in response to a rising alarm: Enable Port, Disable Port, or None. Note that this action enables or disables only bridging at the specified port, and not the interface itself. For more information on how actions are triggered, see How Rising and Falling Thresholds Work, on page 4-27. 8. Click in the Falling Threshold field, and enter the low threshold value for this alarm. Remember, compared values are always relative, or delta values (the difference between the value counted at the end of the current interval and the value counted at the end of the previous interval); be sure to set your thresholds accordingly. Remember, too, when configuring a Kilobits alarm, NetSight Element Manager converts octets into kilobits (units of 125 bytes, or octets) for you; for example, to set a falling threshold of 625 octets, enter a threshold value of 5. 9. In the Falling Action field, click to select the action you want your device to take in response to a falling alarm: Enable Port, Disable Port, or None. Note that this action enables and disables only bridging at the specified port, and not the interface itself. For more information on how actions are triggered, see How Rising and Falling Thresholds Work, page 4-27. TIP Remember, the Actions fields will be grayed out for devices configured to operate in SecureFast switching mode, as there is no active bridging component on those interfaces. It will also be grayed out for devices that do not support the proprietary Actions MIB. 10. Click the Apply button to set your changes. If you have made any errors in configuring alarm parameters (using an invalid rising or falling threshold, for example, or neglecting to supply a polling interval), either an error window with the appropriate message will appear, or a beep will sound and the cursor will blink in the field which contains the error. Correct the noted problem(s), and click the Apply button again. Once you click the Apply button, the configured alarm parameters will be set for every selected interface, and the alarms will automatically be enabled; the list box display will also refresh to reflect these changes. 4-8 Basic Alarm Configuration Alarm Configuration To configure additional alarms, or alarms of a different type, select the appropriate alarm variable at the top of the window, highlight the appropriate interface(s), and repeat the procedures outlined above. Disabling a Basic Alarm Using the Disable button at the bottom of the window actually performs two functions: it both disables the alarm and deletes the alarm entry (and its associated event and action entries) from device memory to help conserve device resources. In the list box display, the parameters for any “disabled” alarm are automatically reset to their default values. To disable an alarm: 1. In the top of the window, click to select the variable for which you wish to disable an alarm: Kilobits, Total Errors, or Broadcast/Multicast. 2. In the list box display, click to highlight the interface(s) for which you wish to disable the selected alarm type. (Remember, you can use shift-click to select a sequential group of interfaces, or ctrl-click to select any group of interfaces.) 3. Click on the Disable button. The selected alarm type on the selected interface(s) will be disabled, and the list box display will refresh to reflect those changes. Viewing the Basic Alarm Log If you have selected the “log” response for an alarm, and that alarm’s rising and/or falling threshold has been crossed, the Basic Alarms application will create a log of alarm occurrences. If a threshold has been crossed, it will be preceded in the interface list box display by a double greater-than sign (>>). Clicking to select an interface which is so marked will activate the View Log button; selecting the View Log button will launch the appropriate Basic Alarm Log, Figure 4-2. (Note that selecting more than one interface — even if all selected interfaces have experienced alarm conditions — will deactivate the View Log button; you can only view a single alarm log at a time.) Basic Alarm Configuration 4-9 Alarm Configuration Figure 4-2. Basic Alarm Log The top portion of the Basic Alarm Log window contains the device information boxes, as well as the Port Number assigned to the interface that experienced the alarm condition and the type of alarm that was triggered; the remainder of the window contains the following information about each alarm occurrence: Index TIP For more information about the relationship between rising and falling alarms and the hysteresis function that controls the generation of alarm events, see How Rising and Falling Thresholds Work, on page 4-27. Time NOTE Indicates the date and time of each event occurrence. In accordance with Year 2000 compliance requirements, NetSight Element Manager now displays and allows you to set all dates with four-digit year values. Description 4-10 This index number uniquely identifies each occurrence of a rising or falling event. Note that, since the alarm whose log is displayed in Figure 4-2 experienced both rising and falling alarms, there are two sets of event indices: one which identifies each instance of the rising alarm, and one which identifies each instance of the falling alarm. Provides a detailed description of the condition which triggered the alarm, including whether it was a Rising or Falling alarm, the Value which triggered the alarm, and the configured Threshold that was crossed. Basic Alarm Configuration Alarm Configuration Each log will hold only a finite number of entries, which is determined by the resources available on the device; when the log is full, the oldest entries will be replaced by new ones. Advanced Alarm Configuration The Basic Alarm Configuration window provides a quick and easy way to set up some basic alarms for all of the interfaces on your SmartSwitch 6000 or Matrix E7 module. However, if you prefer more control over the parameters of the alarms you set (as well as their associated events and actions) and/or a wider array of choices for each variable, the Advanced Alarm feature provides a powerful and flexible means for configuring alarms, events, and actions to suit your particular networking needs. Accessing the RMON Advanced Alarm/Event List To access the RMON Advanced Alarm/Event List window: 1. From the Device View, click on the appropriate port interface to display the Port menu; drag down to Alarm Configuration, and release. 2. In the Basic Alarm Configuration window, click on the Advanced button; the RMON Advanced Alarm/Event List window, Figure 4-3, will appear. Advanced Alarm Configuration 4-11 Alarm Configuration Figure 4-3. The RMON Advanced Alarm/Event List Window NOTES Neither the Alarms or Events list is interface-specific; both will be displayed the same for every interface. Note, too, that alarms and events which have been configured via the Basic Alarms window are not displayed in and cannot be accessed or edited from the Advanced Alarm/Event List window. The top portion of the window displays the usual device information boxes; the remainder of the window contains the Alarms Watch and Events Watch lists, and the command buttons that allow you to create, edit, and delete entries in those lists, or refresh the display. 4-12 Advanced Alarm Configuration Alarm Configuration The fields in the Alarms Watch display include: Index The index is a number that uniquely identifies each alarm. Index numbers are user-defined; you can use any indexing scheme that works for you. These numbers are permanently assigned to their associated alarms; however, index numbers made available by the deletion of existing alarms can be assigned to new alarms, as needed. Note that indices 2000 to 3999 are reserved and unavailable. Interval Indicates the amount of time, in seconds, over which the selected variable will be sampled. At the end of the interval, the sample value is compared to both the rising and falling thresholds configured for the alarm. Sample Indicates whether the sample value to be compared to the thresholds is an absolute, or total value — that is, the total value counted for the selected variable during the interval — or a relative, or delta value — the difference between the value counted during the current interval and the value counted during the previous interval. LoThrshld Indicates the set value for the low, or falling threshold. Event # Indicates the event index number that the falling threshold points to: this is the event that will be triggered if the falling threshold is met or crossed. If the value for this field is zero, no event will be triggered. HiThrshld Indicates the set value for the high, or rising threshold. Event # Indicates the event index number that the rising threshold points to: the event that will be triggered if the rising threshold is met or crossed. If the value for this field is zero, no event will be triggered. Status Indicates the status of the alarm: valid, invalid, or underCreation. An alarm that is invalid is not functional; it may be referring to a MIB component that is inactive (such as the Hosts component), not present, or unreachable, or it may have been deleted by software but not yet removed from memory at the device. An alarm that is underCreation is in the process of being configured (possibly by another management station), and should not be modified until its status is valid; if it never reaches valid status, it will eventually be removed. Alarm Variable Indicates the variable that is being watched. You can use the scroll bar, if necessary, to view the complete name. Note that the information provided in this screen is static once it is displayed; for updated information, click on the Refresh button. Adding or modifying an alarm automatically updates the list. Advanced Alarm Configuration 4-13 Alarm Configuration The fields in the Events Watch display include: Index This is a number that uniquely identifies an entry in the event table; an index number is assigned when an event is created. These numbers are extremely important, as they are the means by which an event is associated with an alarm or a packet capture filter. As with alarms, these index numbers are user-defined and can be assigned according to any indexing scheme that works for you. Index numbers are permanently assigned to their associated events; however, numbers made available by the deletion of existing events can be assigned to new events, as needed. Note that indices 2000 to 4999 are reserved and unavailable. LastTime Indicates the last time this event was triggered. Note that this information is static once it is displayed, and the LastTime field will not be updated unless you close, then open, the Advanced Alarms/Events window, or click on the Refresh button. Type Indicates the type of response that will be generated if the event is triggered: log, trap, or log & trap. A type of “none” indicates that occurrences of the event will not be logged and no trap will be sent; however, note that this field does not indicate whether or not there are any actions associated with the selected event. Description This is a user-defined text description used to identify the event and/or the alarm or packet capture that triggers it. The Event Log button at the bottom of the screen provides access to the log which lists the occurrences of an event. Note that the information provided in this screen is static once it is displayed; for updated information, click on the Refresh button. Adding or modifying an event automatically updates the list. Creating and Editing an Advanced Alarm The Create/Edit Alarms window (Figure 4-4 on page 4-15) allows you to both create new alarms and edit existing ones. When you click on the Create/Edit button in the Alarms Watch list, the Create/Edit Alarms window will display the parameters of the alarm which is currently highlighted in the list. (If no alarms have yet been configured, a set of default parameters will be displayed.) All of these parameters are editable: to change an existing alarm, edit any parameter except the Index value; to create an entirely new alarm, simply assign a new Index number. The ability to assign index numbers allows you to quickly and easily create a number of similar alarms without having to close, then re-open the window or re-assign every parameter. 4-14 Advanced Alarm Configuration Alarm Configuration Note, too, that the main Alarm/Event window remains active while the Create/Edit Alarms window is open; to edit a different alarm (or use its settings as the basis of a new alarm), simply double-click on the alarm you want to use in the main Alarms Watch list, and the Create/Edit Alarms window will update accordingly. To configure an alarm: 1. If you wish to modify an existing alarm or create a new alarm based on the parameters of an existing one, be sure the alarm of interest is highlighted in the Alarms Watch list, then click on the Create/Edit button at the top of the Alarms Watch portion of the RMON Advanced Alarm/Event window. The Create/Edit Alarms window, Figure 4-4, will appear. If you wish to create an entirely new alarm, it doesn’t matter which existing alarm (if any) is highlighted when you open the Create/Edit Alarms window; although the window will, by default, display the parameters of whichever alarm is currently selected, all parameters are editable and can be configured as desired. NOTE Whether you are modifying an existing alarm or creating a new one is determined solely by the assignment of the Index number: if you assign a previously unused index number, a new alarm instance will be created; if you use an existing index number, its associated alarm will be modified. Figure 4-4. The RMON Create/Edit Alarms Window Advanced Alarm Configuration 4-15 Alarm Configuration 2. In the Owner text box, enter some appropriate text designation for this alarm, if desired; you may want to use the network manager’s name or phone number, or the IP or MAC address of the management workstation, to identify the creator of the alarm. Since any workstation can access and change the alarms you are setting in your SmartSwitch 6000 or Matrix E7 series module, some owner identification can prevent alarms from being altered or deleted accidentally. The default value provided is EMAN — <IP address> <(hostname)> <date> <time>, where <IP address> and <(hostname)> refer to the workstation that created the alarm and <date> and <time> reflect the date and time of the alarm’s creation. NOTE In accordance with Year 2000 compliance requirements, NetSight Element Manager now displays and allows you to set all dates with four-digit year values. 3. If you are creating a new alarm, use the Index field to assign a unique, currently unused index number to identify the alarm. Clicking on the Index button will automatically assign the lowest available number; you can also click directly in the text box and assign any value you want between 1 and 1,999 and 4,000 and 6,5535 (indices 2000 to 3999 are reserved and unavailable). NOTE Clicking on the Index button to select the next available index number will replace the current Owner string with the default value described above; if the default value is already in place, the date and time will be updated. If you wish to modify an existing alarm, enter the appropriate index value, or double-click on the alarm of interest in the Alarms Watch list (in the main Alarm/Event window). TIP Remember, the only thing that determines whether you are modifying an existing alarm or creating a new one is the assignment of the index number; be sure to assign this value appropriately. 4. To select the Variable to be used for your alarm, use the MIB Tree display provided on the right side of the window. (For more information about how to use the MIB Tools utility, see the Element Manager Tools Guide.) The display will default to the top of the tree (labeled Internet); there are two ways to locate and/or assign the correct variable: 4-16 Advanced Alarm Configuration Alarm Configuration a. If you know the exact name of the OID whose value you wish to track (including its capitalization), simply enter the name in the Alarm Variable field; to verify that you have entered the name correctly, click on the Find-> button to move the MIB Tree display to that OID. (If the MIB Tree display does not adjust to show the OID you’ve entered, you’ve entered the name incorrectly; remember, case does count!) b. Use the scroll bars and click to open the appropriate folders in the MIB Tree display to locate the object you wish you use; click to select it in the panel, and its name will automatically be entered in the Alarm Variable field. TIP If you don’t know the exact spelling of the OID you wish to use for your alarm variable, and you can’t find it by searching through the tree, use the MIB Tools utility’s Find feature to locate the OID and determine its exact spelling (and tree location). For more information on the MIB Tools utility and its Find capabilities, see the Tools Guide. Almost any RMON or MIB-II object can be used as an alarm variable as long as it is resident in the device firmware and its value is defined as an integer (including counters, timeticks, and gauges). If you select an invalid object (i.e., one whose value is not an integer), the message “!!Can’t set alarm on this type!!” will display in the Alarm Variable field. NOTE If you select an object which is not resident in the device firmware, you will receive a “Set Failed; ensure variable is readable” message when you try to set your alarm by clicking on the Apply button. If you are unsure just which objects are resident on your device, and you find yourself receiving a lot of “Set Failed” messages, you can use the MIB Tools utility (accessed from the main console window menu bar or from a Device View) to determine which objects are and are not part of your device’s firmware — simply query the object you are interested in; if the query response comes back empty, the object is not present (make sure you are using the appropriate community name when making a query, or you will get no response). 5. Once you have selected the object you wish to use for your alarm variable, you must assign the appropriate instance value in the Alarm Instance field. Most RMON objects are instanced by the index number assigned to the table in which they reside; for example, if you wish to set an alarm on an object located in an RMON Statistics table, you can determine the appropriate instance by noting the index number assigned to the table that is collecting data on the interface you’re interested in. In the case of the default tables, index numbers often mirror interface numbers; however, if there are multiple default tables per interface, or if additional tables have been created, this may not be true. (Table index numbers are assigned automatically as table entries are created; no two tables — even those on different interfaces — will share the same table index number.) Advanced Alarm Configuration 4-17 Alarm Configuration If you have selected an object from a table which is indexed by some other means — for example, by ring number — you must be sure to assign the instance accordingly. If you’re not sure how a tabular object is instanced, you can use the MIB Tools utility (described in the Tools Guide) to query the object; all available instances for the object will be displayed. (Host and matrix table objects — which are indexed by MAC address — require special handling; see the Note which follows this step.) If you have selected an object which is not part of a table, you must assign an instance value of 0. TIP You can use the MIB Tree display to determine which objects are tabular and which are not: objects which are part of a table will descend from a blue folder (which will have a “T” on it, and a name which will almost always include the word “table”); objects which are not will descend directly from a yellow folder. (Note: There may be one or more yellow folders in between the blue folder which contains the table and the leaf object you wish to use; however, those objects are still part of the table.) Be sure you define your instance values carefully; if you neglect to set the instance correctly, you will receive the “Set failed; ensure variable is readable” error message when you click the Apply button to set your alarm. 4-18 Advanced Alarm Configuration Alarm Configuration NOTE If you wish to set an alarm on an object whose instance is non-integral — for example, a Host Table object indexed by MAC address — or on an object with multiple indices, like a Matrix Table entry (which is indexed by a pair of MAC addresses), you must follow certain special procedures for defining the instance. For these OIDs, the instance definition must take the following format: table index.length(in bytes).instance(in decimal format) For the first byte of the instance, you must use the index number of the table which contains the OID you want to track. For example, to set an alarm on an object in the Host Table, define the first byte of the instance as the index number assigned to the specific Host Table you want to check. These index numbers are assigned automatically as the table entries are created; no two tables — even if they are on different interfaces — will share the same table index number. Second, you must specify the length, in bytes, of the index you will be using. Again, in the case of an object in the Host Table, that value would be 6, since Host Table entries are indexed by MAC address — a six-byte value. Finally, you must specify the index itself, in decimal format. In the case of a MAC address, that means you must convert the standard hexadecimal format to decimal format. To do this, simply multiply the first digit of the two-digit hex number by 16, then add the value of the second digit. (For hex values represented by alphabetical characters, remember that a=10, b=11, c=12, d=13, e=14, and f=15.) A hex value of b7, for instance, is represented in decimal format as 16 x 11 + 7, or 183. So, for example, the instance for an object in the Hosts group might read as follows: 2.6.0.0.29.170.35.201 where 2=the host table index; 6=the length in bytes of the index to follow; and 0.0.29.170.35.201=the decimal format for MAC address 00-00-1d-aa-23-c9. For objects with multiple indices — such as objects in a matrix table — you must add additional length and index information to the instance definition, as illustrated below: 3.6.0.0.29.170.35.201.6.0.0.29.10.20.183 where 3=the matrix table index; 6=the length in bytes of the index to follow; 0.0.29.170.35.201=the decimal format for MAC address 00-00-1d-aa-23-c9; 6=the length in bytes of the next index; and 0.0.29.10.20.183=the decimal format for MAC address 00-00-1d-0a-14-b7. Additional instance issues may exist for FDDI objects; if you’re unsure how to assign an instance, use the MIB Tools utility to query the object of interest, and note the appropriate instancing on the returned values. 6. In the Alarm Interval field, enter the amount of time over which the selected variable will be sampled. At the end of the interval, the sample value will be compared to both the rising and falling thresholds. There is no practical limit to the size of the interval (as the maximum value is 24,855 days 3 hours 14 minutes and 7 seconds — over 68 years!); the default value is 1 minute. Advanced Alarm Configuration 4-19 Alarm Configuration 7. Since the first sample taken can be misleading, you can use the selections in the Startup Alarm box to disable either the rising or the falling threshold for that sample only. If you would like to exclude the falling alarm, select the Rising option; the first sample taken will only generate a rising alarm, even if the sample value is at or below the falling threshold. To exclude the rising alarm, select the Falling option; the first sample will then only generate a falling alarm, even if the sample value is at or above the rising threshold. If you wish to receive both alarms as appropriate, select the Both option. 8. Use the selections in the Sample Type box to indicate whether you want your threshold values compared to the total count for the variable during the interval (Absolute), or to the difference between the count for the current interval and the count for the previous interval (Delta). Make sure you have set your thresholds accordingly. 9. Click in the RisingThreshold field; enter the high threshold value for this alarm. 10. There are two ways to assign an event to your rising threshold: click in the RisingEventIndex text box and enter the number of the event you would like to see triggered if the rising threshold is crossed; or use the Events Watch list in the main Alarm/Event window to highlight the desired event, then click on the Rising Event Index button. Be sure you assign the number of a valid event or there will be no response if the selected variable meets or crosses this threshold; assigning an index of zero effectively disables the threshold, as there will be no indication that it has been crossed. For more information on how events are triggered, see How Rising and Falling Thresholds Work, on page 4-27. 11. Click in the FallingThreshold field; enter the low threshold value for this alarm. 12. There are two ways to assign an event to your falling threshold: click in the FallingEventIndex text box and enter the number of the event you would like to see triggered if the falling threshold is crossed; or use the Events Watch list in the main Alarm/Event window to highlight the desired event, then click on the Falling Event Index button. Again, be sure you assign the number of a valid event or there will be no response if the selected variable meets or crosses this threshold; assigning an index of zero effectively disables the threshold, as there will be no indication that it has been crossed. For more information on how events are triggered, see How Rising and Falling Thresholds Work, on page 4-27. There is no limit to the number of alarms that may be assigned to the same event. NOTE 4-20 Advanced Alarm Configuration Alarm Configuration 13. Click the Apply button to set your changes. If you have made any errors in configuring alarm parameters (using an invalid value in any field, leaving a field blank, or selecting an alarm variable which is not resident on the device), an error window with the appropriate message will appear. Correct the noted problem(s), and click the Apply button again. Note that the window remains open so that you may configure additional new alarms or modify existing ones; remember, you can double-click on any alarm in the Alarms Watch list in the main Alarm/Event window to display its parameters in the Create/Edit Alarms window. When you have finished configuring your alarms, click on the Cancel button to close the window. Creating and Editing an Event The Create/Edit Events window (Figure 4-5, on page 4-22) — like the Create/Edit Alarms window — allows you to both create new events and edit existing ones. When you click on the Create/Edit button in the Events Watch list, the Create/Edit Events window will display the parameters of the event which is currently highlighted in the list. (If no events have yet been configured, a set of default parameters will be displayed.) All of these parameters are editable: to change an existing event, edit any parameter except the Index value; to create an entirely new event, simply assign a new Index number. The ability to assign index numbers allows you to quickly and easily create a number of similar events without having to close, then re-open the window or re-assign every parameter. Note, too, that the main Alarm/Event window remains active while the Create/Edit Events window is open; to edit a different event (or use its settings as the basis of a new event), simply double-click on the event you want to use in the main Events Watch list, and the Create/Edit Events window will update accordingly. TIP If the Create/Edit Actions window is also open, it too will update to display the actions associated with the event currently selected in the main Alarm/Event window. See Adding Actions to an Event, on page 4-24, for more information on the actions feature. To configure an event: 1. If you wish to modify an existing event or create a new event based on the parameters of an existing one, be sure the event of interest is highlighted in the Events Watch list, then click on the Create/Edit button at the top of the Events Watch portion of the RMON Advanced Alarm/Event window. The Create/Edit Events window, Figure 4-5, will appear. If you wish to create an entirely new event, it doesn’t matter which existing event (if any) is highlighted when you open the Create/Edit Events window; although the window will, by default, display the parameters of whichever event is currently selected, all parameters are editable and can be configured as desired. Advanced Alarm Configuration 4-21 Alarm Configuration Figure 4-5. The RMON Create/Edit Events Window TIP Whether you are modifying an existing event or creating a new one is determined solely by the assignment of the Index number: if you assign a previously unused index number, a new event instance will be created; if you use an existing index number, its associated event will be modified. 2. If you are creating a new event, use the Index field to assign a unique, currently unused index number to identify the event. Clicking on the Index button will automatically assign the lowest available number; you can also click directly in the text box and assign any value you want between 1 and 1,999 and 5,000 and 65,534 (indices 2000 to 4999 are reserved and unavailable). NOTE Clicking on the Index button to select the next available index number will replace the current Owner string with the default value; if the default value is in already in place, the date and time will be updated. If you wish to modify an existing event, enter the appropriate index value, or double-click on the event of interest in the Events Watch list (in the main Alarm/Event window). TIP 4-22 Remember, the only thing that determines whether you are modifying an existing event or creating a new one is the assignment of the index number; be sure to assign this value appropriately. Advanced Alarm Configuration Alarm Configuration 3. Click in the Description text box to enter any text description you want to identify the event. This description will appear in the Events Watch portion of the main Advanced Alarm/Event window, and help you distinguish among the events you have configured. 4. Any value you enter in the Community field will be included in any trap messages issued by your SmartSwitch 6000 or Matrix E7 series module when this event is triggered; this value is also used to direct traps related to this event to the appropriate management workstation(s): a. If you enter a value in this field, traps related to this event will only be sent to the network management stations in the device’s trap table which have been assigned the same community name (and for which traps have been enabled). Any IP addresses in the device’s trap table which have not been assigned the same community string, or which have been assigned no community string, will not receive traps related to the alarm(s) you are configuring. b. If you leave this field blank, traps related to this event will be sent to any network management stations which have been added to the device’s trap table, and for which traps have been enabled — regardless of whether or not those IP addresses have been assigned a community name in the trap table. TIP For more information about configuring your SmartSwitch 6000 or Matrix E7 series module’s trap table, consult your Local Management documentation or the Remote Administration Tools Guide. (Remember, no traps will be sent by your SmartSwitch 6000 or Matrix E7 series module at all unless its trap table has been properly configured!) 5. You can use the Owner text box for administrative or informational purposes; although the text entered here will not appear on any other screens, you may want to use the network manager’s name or phone number, or the IP or MAC address of the management workstation, to identify the owner of the event. Since any workstation can access and change the events you are setting in your RMON device, some owner identification can prevent events from being altered or deleted accidentally. The default value provided is monitor. 6. Use the options in the Event Type field to define how this event will respond when an associated threshold is crossed: a. Select the Log option to create a silent log of event occurrences and the alarms that triggered them. Each event’s log can be viewed by clicking on the Event Log button at the bottom of the Alarm/Event window. (See Viewing an Advanced Alarm Event Log, on page 4-27, for details.) b. Select Trap to instruct the device to send a pair of SNMP traps (one WARNING, one NORMAL) to the management station each time the event is triggered. Advanced Alarm Configuration 4-23 Alarm Configuration NOTES In order for the trap selection to work properly, your SmartSwitch 6000 or Matrix E7 series module must be configured to send traps to the management station. This is accomplished via local management; consult your device hardware manual for more information. If you are monitoring a variable you consider to be critical, we do not recommend that you select Trap as the only event response; if a trap is lost due to a collision or other transmission problem, it will not be re-sent. c. Select both Log and Trap to both log the event occurrence and generate the traps. If you select neither option, the event’s occurrences will neither be logged nor generate traps; unless the event includes an action or a series of actions, this effectively disables the event (since there will be no indication that it has been triggered). NOTE The Event Type field in the Advanced Alarm/Event List window will display a value of “none” if neither the Log nor the Trap response has been selected; note, however, that this field does not indicate whether or not an event has been configured to perform an SNMP SET or series of SETs via the Actions MIB. 7. For devices which support the proprietary Actions MIB, an Actions button will appear in the Create/Edit Events window; using this feature, you can configure an SNMP SET or series of SETs that will be performed automatically when the event is triggered. See Adding Actions to an Event, below, for more information. 8. Click the Apply button to set your changes. Note that the window remains open so that you may configure additional new events or modify existing ones; remember, you can double-click on any event in the Events Watch list in the main Alarm/Event window to display its parameters in the Create/Edit Events window (and in the Create/Edit Actions window, if it’s open). When you have finished configuring your events, click on the Cancel button to close the window. Adding Actions to an Event For devices which support the proprietary Actions MIB, selecting the Actions button in the Create/Edit Events window opens the Create/Edit Action window (Figure 4-6), which allows you to define an SNMP SET or series of SETs that will be performed automatically when the associated event is triggered. 4-24 Advanced Alarm Configuration Alarm Configuration To add an action or actions to an event: 1. In the Create/Edit Events window, click on the Actions button. The Create/Edit Action window, Figure 4-6, will appear. Figure 4-6. The RMON Create/Edit Action Window NOTE If no Actions button appears in the Create/Edit Events window, the selected SmartSwitch 6000 or Matrix E7 series module does not support the Actions MIB. For more information about devices which support this MIB, contact the Enterasys Global Call Center. 2. The index number and description of the event with which the action or actions will be associated is displayed in the Event: field at the top of the window. Information in this field is not editable; to assign actions to a different event, double-click on the correct event in the Events Watch list; both the Create/Edit Events and Create/Edit Action windows will update accordingly. 3. The Description field is not currently editable; future releases of NetSight Element Manager will allow you to assign a descriptive label to each set of actions. Advanced Alarm Configuration 4-25 Alarm Configuration 4. To select the Variable whose value you wish to SET, use the MIB Tree display provided on the right side of the window. (For more information about how to use the MIB Tools browser, see the Tools Guide.) Use the scroll bars and click to open the appropriate folders in the MIB Tree display to locate the object you wish to use; click to select it in the panel, and its name will automatically be entered in the Variable field. TIP If you select an invalid OID — that is, one which does not permit write access — the message !!Can’t set action on this type!! will be displayed in the Variable field. If you don’t know the exact spelling of the OID you wish to use for your alarm variable, and you can’t find it by searching through the tree, use the MIB Tools utility’s Find feature to locate the OID and determine its exact spelling (and tree location). For more information on the MIB Tools utility and its Find capabilities, see the Tools Guide. 5. Once you have selected the object you wish to set, you must assign the appropriate instance value in the Instance field. If you’re not sure how the object you wish to set is instanced, you can use the MIB Tools utility (described in the Tools Guide) to query it; all available instances for the object will be displayed. 6. In the Value field, enter the value you wish to set for the selected object. Again, if you’re not sure what the valid values are for the variable you wish to set, locate the object in the MIB Tools utility and use the Details tab to obtain more information. 7. Once you’ve configured your action, click on the Add button; the action will be added to the Action Table list in the lower left corner of the window. Note that the window remains open so that you may configure additional new actions or modify existing ones; selecting on any action in the Action Table will display that action’s parameters in the window and make them available for editing. When you have finished configuring your actions, click on the Cancel button to close the window. Note that the Action Table will update automatically each time an action is added or deleted; use the Refresh button to update the table at any time. Deleting an Alarm, Event, or Action To delete an alarm, event, or action: 1. In the appropriate window, highlight the alarm, event, or action you wish to remove. 2. Click on the Delete button. A window will appear asking you to confirm your selection; click on the OK button to delete, or on the Cancel button to cancel. 4-26 Advanced Alarm Configuration Alarm Configuration When you delete an event, be sure you edit all alarms that were pointing to that event, and assign a new valid event to those thresholds; note, too, that deleting an event automatically deletes its associated actions, as actions cannot exist in the absence of an association with an event. Again, as a general rule, we recommend that you do not delete an alarm or event of which you are not the owner. Viewing an Advanced Alarm Event Log To view the log of occurrences for any event, highlight the event for which you wish to view the log, then click on the Event Log button at the bottom of the Advanced Alarm/Event List window; the Event Log window will appear. The top portion of the window contains the device information boxes, as well as the event index number and the event description; the log itself includes the following fields: NOTE Index This index number is not the event’s index, but a separate index that uniquely identifies this occurrence of the event. Time Indicates the date and time of each event occurrence. In accordance with Year 2000 compliance requirements, NetSight Element Manager now displays and allows you to set all dates with four-digit year values. Description Provides a detailed description of the alarm that triggered the event: whether it was a rising or falling alarm, the alarm index number, the alarm variable name and object identifier (OID), the alarmSampleType (1=absolute value; 2=delta value), the value that triggered the alarm, the configured threshold that was crossed, and the event description. Use the scroll bar at the bottom of the log to view all the information provided. Each log will hold only a finite number of entries, which is determined by the resources available on the device; when the log is full, the oldest entries will be replaced by new ones. How Rising and Falling Thresholds Work Rising and falling thresholds are intended to be used in pairs, and can be used to provide notification of spikes or drops in a monitored value — either of which can indicate a network problem. To make the best use of this powerful feature, however, pairs of thresholds should not be set too far apart, or the alarm notification process may be defeated: a built-in hysteresis function designed to limit the generation of events specifies that, once a configured threshold is met or crossed in one direction, no additional events How Rising and Falling Thresholds Work 4-27 Alarm Configuration will be generated until the opposite threshold is met or crossed. Therefore, if your threshold pair spans a wide range of values, and network performance is unstable around either threshold, you will only receive one event in response to what may be several dramatic changes in value. To monitor both ends of a wide range of values, set up two pairs of thresholds: one set at the top end of the range, and one at the bottom. Figure 4-7 illustrates such a configuration. Figure 4-7. Sample Rising and Falling Threshold Pairs TIP 4-28 The current version of the Basic Alarms window only allows you to configure a single pair of thresholds for each alarm variable on each interface; be sure to keep this hysteresis function in mind when configuring those threshold values. How Rising and Falling Thresholds Work Chapter 5 Managing Ethernet MicroLAN Modules Viewing the Statistics, Timer Statistics, and Performance Graph windows; using the repeater, board, and port Alarm Limits windows; setting alarm limits; link state traps, segmentation traps, and source address traps The Repeater menu provides access to windows for monitoring and managing repeated Ethernet networks supported by a SmartSwitch 6000 or Matrix E7 Ethernet MicroLAN module (e.g., the 6E123-50 or 6E133-49). The Repeater menu option is available in the Device View for Ethernet MicroLAN modules. Among the windows available from this menu are repeater, board, and port statistics windows (including Statistics, Timer Statistics, and Performance Graph windows); repeater, board, and port Alarm Limits windows; and repeater, board, and port Trap Selection windows. The Lock/Unlock Ports option on the Repeater menu enables you to control port security. The Device View for Ethernet MicroLAN modules displays the port locking status of each repeater channel in a panel to the left of the module. Refer to Chapter 2, The Device View for more information on the Ethernet MicroLAN port display and menu structure. Repeater Statistics The statistical information collected and stored by your Ethernet MicroLAN module provides you with detailed information about how much traffic your network (or a segment thereof) is experiencing, including the sizes and types of packets that make up that traffic, and how much of that traffic comprises packets which have been badly formed or somehow mangled in transmission. These statistics can give you a good overall sense of the usage your network, or network segment, is experiencing. 5-1 Managing Ethernet MicroLAN Modules To help you better understand and track the traffic your network is handling, NetSight Element Manager provides you with a variety of statistical information presented in three different formats: Statistics, Timer Statistics, and Performance Graphs. TIP Although you can launch most statistics windows from both the Repeater and Module menus, the information provided at both levels will be the same, since each “board” on the Ethernet MicroLAN module is equivalent to a repeater channel. The Statistics Windows At the Statistics windows, you can view accumulated statistics and error breakdowns for each network supported by the Ethernet MicroLAN module, and for each individual module and port. A pie chart graphically depicts these statistics for quick visual reference. Statistics displayed in these windows include: • • • • • • • • • • Active Users Bytes Broadcasts Packets Collisions (combined Transmit and Receive) OOW Collisions Giants Alignment CRC Errors Runts The pie chart to the right of the statistics text boxes lets you graphically view your statistics. The colors in the pie chart correspond to the colors for Packets (green), Collisions (red), and the two error modes: Hard Errors (cyan), and Soft Errors (yellow). Accessing the Statistics Windows To open the Repeater Statistics window: 1. Click on Repeater in the Device View menu bar; a menu listing the active repeater channels will appear. 2. Drag down to select the appropriate repeater channel (A - H), then right to reveal the Repeater menu. 3. Select Statistics. The Repeater Statistics window, Figure 5-1, will appear. 5-2 Repeater Statistics Managing Ethernet MicroLAN Modules Figure 5-1. The Repeater Statistics Window To open the board-level Statistics window from the Device View window: 1. Click on the appropriate Module Index to display the Module menu. 2. Drag down to select the appropriate repeater channel (A - H), then right to reveal the board-level Repeater menu. 3. Select Statistics. The board-level Statistics window will appear. To access the port-level Statistics window: 1. Click on the appropriate Port to display the port menu. 2. Select Statistics. The port-level Statistics window will appear. The Module and Port Statistics windows are the same as the Statistics window displayed in Figure 5-1, except that they display statistics applicable to the module or port. Statistics Defined The Statistics window displays the statistical counts accumulated since the Ethernet MicroLAN module was last reset; the following information is displayed: Active Users Displays the number of users (identified by MAC [Ethernet] address) communicating via a port on the Ethernet MicroLAN module. For an individual port, the number of Active Users can tell you whether the port is supporting a station or trunk connection. Repeater Statistics 5-3 Managing Ethernet MicroLAN Modules Bytes Displays the total number of bytes – including error packets – that have been processed by the selected repeater, board, or port. Note that this byte count includes errors. Broadcasts Displays the total number of broadcast frames that have been processed by the repeater, board, or port. Broadcast packets have a single address recognized by each station on the net; this address is designated in IP address form as 255.255.255.255, or in MAC hexadecimal form as FF-FF-FF-FF-FF-FF. ARP and RARP requests sent by bridges and routers are broadcast messages. Packets Displays the total number of packets processed by the repeater, board, or port. Again, note that the packet count includes errors. Collisions Displays the combined number of transmit and receive collisions detected by the repeater, board, or port. Transmit collisions are those the Ethernet MicroLAN module detects while transmitting a packet, which means the Ethernet MicroLAN module has transmitted one of the colliding packets; receive collisions are those detected by the Ethernet MicroLAN module while it is receiving a transmission. Hard Errors OOW Collisions Giants Soft Errors CRC Errors 5-4 Displays the number of collisions out of the standard collision window (51.2 µs) experienced by the repeater, board, or port. Out-of-window collisions typically indicate a network design flaw. Displays the number of giant packets that the repeater, board, or port has detected. A giant packet exceeds the maximum Ethernet frame size of 1518 bytes (excluding the preamble). Displays the total number of packets with CRC (Cyclical Redundancy Check) errors that the repeater, board, or port has received from the network. CRC errors occur when packets are somehow damaged in transit. Alignment Errors Displays the total number of misaligned packets received by the repeater, board, or port. A misaligned packet is one that contains a non-integral number of bytes (that is, any unit of bits less than a byte). Alignment errors are also known as framing errors. Runts Displays the number of runt packets that the repeater, board, or port has received from the network. A runt packet is one that is less than the minimum Ethernet frame size of 64 bytes. Repeater Statistics Managing Ethernet MicroLAN Modules NOTE For more detailed definitions of these statistics and information on the possible network conditions they represent, consult the Enterasys Network Troubleshooting Guide, included with this package. Using the Total and Delta Option Buttons By using the Total and Delta option buttons located at the bottom of the Statistics windows, you can choose whether to view the total statistics count (Total) or the statistics count for the last polling interval (Delta). To choose Total or Delta: 1. Click on the Total option button; after the completion of the current polling cycle plus one complete polling cycle, the window will display the total count of statistics processed since the most recent start-up of the Ethernet MicroLAN module. 2. Click on the Delta option button; after the completion of the current polling cycle plus two more polling cycles, the window will display the count of statistics processed during the last poll interval. These counts will be refreshed after each polling interval. TIP Repeater Statistics The statistics windows use the polling interval you have set for the monitored device via the Device Management page of the Options window, which is launched from the Tools menu in the NetSight Element Manager primary window menu bar. See your Element Manager User’s Guide for more information on setting the Chassis Manager polling interval. 5-5 Managing Ethernet MicroLAN Modules Timer Statistics You can use the Timer Statistics windows to gather statistical information concerning the repeater channels on your Ethernet MicroLAN module and its boards and/or ports over a user-set time period. Statistics are displayed both numerically and graphically, using color-coded, dynamic bar charts. These bar charts display the elapsed, average, and peak values for percent load, percent collisions, and percent errors at the repeater, board, or port level. The values are color-coded as follows: • Green (Elapsed) – Indicates the level of activity during the last time interval. • Blue (Average) – Indicates the average levels of activity over all timer intervals since the window was invoked. • Magenta (Peak) – Indicates the peak level of activity over all time intervals since the window was invoked. The displayed statistics will automatically update using the time interval you have set; allowable time intervals range from one second to 23 hours/59 minutes/59 seconds. You can also refresh the statistics accumulated in the Timer Statistics window at any time by clicking the Clear button. This will only reset the counters at the Timer Statistics window; the statistical counts maintained by the device are not affected. The time under the Clear button will also update, indicating the last time that the Timer Statistics window was cleared. NOTE The time interval set in the Timer Statistics window functions independently from the polling interval you have set for the monitored device via the Device Management page of the Options window. Accessing the Timer Statistics Windows To open the repeater-level Timer Statistics window: 1. Click on Repeater in the Device View menu bar; a menu listing the active repeater channels will appear. 2. Drag down to select the appropriate repeater channel (A - H), then right to reveal the Repeater menu. 3. Select Timer Statistics. The Repeater Timer Statistics window, Figure 5-2, will appear. 5-6 Repeater Statistics Managing Ethernet MicroLAN Modules Figure 5-2. The Repeater Timer Statistics Window To open the board-level Timer Statistics window: 1. Click on the appropriate Module Index to display the Module menu. 2. Drag down to select the appropriate repeater channel (A - H), then right to reveal the board-level Repeater menu. 3. Select Timer Statistics. The board-level Timer Statistics window will appear. To access the port-level Timer Statistics window: 1. Click on the appropriate Port to display the port menu. 2. Select Timer Statistics. The port-level Timer Statistics window will appear. The Board and Port Timer Statistics windows are similar to the Repeater Timer Statistics window displayed in Figure 5-2, except that they display statistics applicable to the board or the port. The Timer Statistics windows display the elapsed, average, and peak values for the following statistics: % Load The percentage of total theoretical load processed by the selected repeater, board, or port during the user-defined time interval. For standard Ethernet, the total theoretical load is 10 Mbps. % Collisions The percentage of collisions processed by the selected repeater, board, or port during the user-defined time interval. Repeater Statistics 5-7 Managing Ethernet MicroLAN Modules % Errors The percentage of errors processed by the selected repeater, board, or port during the user-defined time interval. Setting the Timer Statistics Interval To set the Timer Statistics time interval: 1. Click on the clock symbol next to the Interval text box. The New Timer Interval text box, Figure 5-3, will appear. Figure 5-3. New Timer Interval Text Box 2. Using the mouse, click to highlight the hour field in the New Timer Interval text box. 3. Using the arrow keys to the right of the text box, scroll to change the hour, as desired. Notice that the time is given in a 24-hour hh:mm:ss format. 4. Using steps 2 and 3, continue to change the minutes and seconds fields, as desired. 5. Click on OK when you are finished entering new information. The new Time Interval you have set is now entered. The Timer Statistics window will refresh to zero, and the new time interval will take effect immediately. Repeater Performance Graphs With the Repeater Performance Graphs, you can use real-time statistics reporting to see at a glance the amount of traffic going through your Ethernet MicroLAN module at the repeater, board, or port level. These windows provide current statistics both graphically and numerically. The graph has an X axis that indicates the 60 second interval over which charting occurs continuously, while the Y axis measures the number of packets or errors that are processed by the selected repeater, board, or port. The Detail buttons brings up an additional window that displays a breakdown of the traffic by error type. 5-8 Repeater Statistics Managing Ethernet MicroLAN Modules You can select the graphing and statistics parameters by using the command buttons (for Percent Load, Frames, or Errors) and their associated menus. When you alter a parameter, the new parameter will appear on the face of the button, and the statistics will refresh to zero activity before regenerating. Accessing the Performance Graph Windows To access the repeater-level Performance Graph window: 1. Click on Repeater on the Device View menu bar; a menu listing active repeater channels will appear. 2. Drag down to select the appropriate repeater channel (A - H), then right to reveal the Repeater menu. 3. Select Performance Graph. The Performance Graph window, Figure 5-4, will appear. Figure 5-4. The Repeater Performance Graph Window To access the board-level Performance Graph windows: 1. Click on the appropriate Module Index to display the Module menu. 2. Drag down to select the appropriate repeater channel (A - H), then right to reveal the board-level Repeater menu. Repeater Statistics 5-9 Managing Ethernet MicroLAN Modules 3. Select Performance Graph. The board-level Performance Graph window will appear. To access the port-level Performance Graph windows: 1. Click on the appropriate Port in the Device View display; the port menu will appear. 2. Select Performance Graph. The port-level Performance Graph window will appear. The Board and Port Performance Graph windows are similar to the Repeater Performance Graph window displayed in Figure 5-4, except that they display statistics applicable to the board or port level. For each chosen statistic, Performance Graphs display both average and peak activity, as well as the date and time the peak values were recorded; average values are also displayed graphically. NOTE In accordance with Year 2000 compliance requirements, NetSight Element Manager now displays and allows you to set all dates with four-digit year values. The Average statistics are updated every two seconds, as averaged over the previous four two-second intervals; the graphical display also updates at two-second intervals. For the first 60 seconds of graphing, you will note the graph lines extending as each interval’s data is added to the graph. Once the first 60 seconds has passed, the newest data is added at the right edge of the graph, and the oldest data is scrolled off to the left. Each Performance Graph window allows you to graph the following statistical variables: Percent Load (Green) Percent Load Reflects the network load generated by the selected repeater, board, or port, compared to the theoretical maximum load (10 Mbits/s) of an Ethernet network. 5-10 Active Users The number of users transmitting or receiving on the selected repeater, board, or port, as determined by the current number of Ethernet (MAC) addresses stored in each port’s Source Address Table. Nothing The Percent Load function is not currently measuring any statistics. Repeater Statistics Managing Ethernet MicroLAN Modules Frames (Blue) Frames Nothing Total Errors (Red) Total Errors NOTE Repeater Statistics The total number of packets (both good and error) processed by the selected repeater, board, or port. The Frames scale is not currently measuring any statistics. The total number of errors of any kind processed by the selected repeater, board, or port. Collisions The total number of collisions (combined transmit and receive) detected by the selected repeater, board, or port. CRC Errors The total number of packets with CRC (Cyclical Redundancy Check) errors that the selected repeater, board, or port has received from the network. Runt Packets The number of runt packets detected by the selected repeater, board, or port. A runt frame is one that is less than the minimum Ethernet frame size of 64 bytes. Giant Packets The number of giant packets detected by the selected repeater, board, or port. A giant frame exceeds the maximum Ethernet frame size of 1518 bytes (excluding the preamble). Algn. Errors The number of misaligned packets detected by the selected repeater, board, or port. Misaligned packets are those which contain a non-integral number of bytes; they can result from a MAC layer packet formation problem, or from a cabling problem that is corrupting or losing data. Alignment errors are also known as framing errors. OOW Collns. The number of collisions out of the standard collision window (51.2 µs) experienced by the selected repeater, board, or port. There are two conditions which can cause this type of error to occur: either the network’s physical length exceeds IEEE 802.3 specifications, or a node on the net is transmitting without first listening for carrier sense (and beginning its illegal transmission more than 51.2 µs after the first station began transmitting). Nothing The Errors scale is not currently monitoring error packets. For more detailed definitions of these statistics and information on the possible network conditions they represent, consult the Enterasys Network Troubleshooting Guide, included with this package. 5-11 Managing Ethernet MicroLAN Modules Configuring the Performance Graphs To configure the Performance Graphs: 1. Click on the Percent Load button; select the desired Load mode from the menu. 2. Click on the Frames button; select the desired Frames mode from the menu. 3. Click on the Total Errors button; select the desired Errors mode from the menu. Once you have selected a new mode, it will appear in its respective button, and the Performance Graph and statistics will refresh and begin to measure using the new mode. To stop monitoring and exit the window, click Cancel. The Detail Button The Detail button allows you to view traffic processed by the repeater channel, board, or port according to general frame status (good, errors, or collisions); it also allows you to view errors by type. When you click the Detail button, a separate window appears (Figure 5-5) that displays pie charts and statistics for both frame status and error type. Figure 5-5. Detail Breakdown Window 5-12 Repeater Statistics Managing Ethernet MicroLAN Modules Frame Status Breakdown With the Detail Breakdown window, you can see the status of the frames passing through your each repeater channel and each board and port. The status conditions and corresponding colors (for both the pie chart and numerical statistics) are: • • • Good (Green) Total Errors (Red) Collisions (Blue) Error Breakdown The Detail Breakdown window also displays the number of error packets received by a repeater, board, or port. You can view both numerical statistics and a pie chart breakdown for the following errors (note the corresponding colors): • • • • • Alignment (Green) CRC (Red) Runts (Blue) Giants (Magenta) OOW Colls (Maroon) Using Port Locking and Unlocking The Port Locking feature enables an Ethernet MicroLAN module to prevent any new source addresses from accessing the ports connected to the selected repeater channel. The Lock/Unlock Ports option is available from the Repeater menu in the Device View for the Ethernet MicroLAN module. When a source address attempts to access a port, the module will compare that address to those in the Source Address Database for that port. If the port has been successfully locked and the detected address has not been secured, the port will automatically shut down, no traffic will be allowed through, and a trap will be sent to the management station (if traps have been enabled and the Trap Table has been properly configured). Whether a port can be successfully locked and how its addresses are “secured” depends both on the number of source addresses in each port’s table at the time locking was enabled, and on the version of firmware currently running on the selected device. For older firmware versions: Repeater Statistics • For station ports (those detecting zero, one, or two source addresses at the time locking was enabled), the first two detected addresses are automatically secured; port locking will shut down the port if any additional addresses attempt access. • For trunk ports (those detecting three or more source addresses at the time locking was enabled) there is no port shut-down security feature; if port locking is enabled, all packets will continue to be allowed to pass. 5-13 Managing Ethernet MicroLAN Modules NOTE On devices running older firmware versions, unlinked ports will be disabled immediately after locking has been enabled; these ports can be re-enabled using their port menus, but they will immediately be disabled again if a device is connected and begins transmitting (since the port’s source address table was locked in an empty state). Be sure to unlock empty ports before linking them. For newer firmware versions: ! CAUTION • For station ports, the locking mechanism behaves as described above: the first two detected addresses are automatically secured; port locking will shut down the port if any additional addresses attempt access. • For trunk ports detecting more than two but fewer than 34 addresses, only the first two detected addresses are automatically secured, and no additional addresses can be secured. Due to a firmware anomaly, trunk ports may shut down if they are locked. Because of a firmware anomaly which may cause certain trunk ports to be shut down if they are locked, we recommend that you do not implement Port Locking from the Repeater menu for any channel which contains a trunk port supporting more than two but fewer than 34 users. You can still achieve a measure of security on such channels, however, by locking ports individually from the Port Security window; see Locking and Unlocking Individual Ports, page 5-17, for details. • NOTE Trunk ports with more than 34 addresses are considered unsecurable, and will not be locked. The Device Aging Time does not apply to station ports when Locking is enabled, although the snapshot of the Source Address Database provided by the Source Addressing window may show the detected source address aging out if that address remains inactive, and the appropriate trap will be generated. Viewing Lock Status Information The Device View for Ethernet MicroLAN modules displays the port locking status of each repeater channel in a panel to the left of the module. 5-14 • If the Lock Status icon is green and open, no ports on that repeater are locked. • If the Lock Status icon is red and closed, all ports on that repeater are locked. • If the Lock Status icon is yellow and open, the port lock status on the repeater is mixed. Repeater Statistics Managing Ethernet MicroLAN Modules TIP The only way to achieve a mixed lock status is by locking ports via the port-level Security windows. If your Ethernet MicroLAN module is running firmware version 2.03.03 or later, the repeater, port group (board), and port Security options will be available, and the resulting windows will appear to allow you to set all security parameters. However, only the Lock Port option actually has any effect, as the LANVIEWSECURE features are only functional on modules which have been equipped with the appropriate hardware. Contact the Enterasys Global Call Center or your local sales representative for more information about purchasing Ethernet MicroLAN modules which support the LANVIEWSECURE functionality. Determining a Port’s Topology Status There are three ways to determine whether a port’s topology status is currently station or trunk: NOTES • Bring up the port’s Statistics window, and check the Active Users field. If the Active Users field displays zero, one, or two, the port is in station status; if it is three or more, the port is in trunk status. • Bring up the port’s Source Addressing window. If zero, one, or two source addresses appear, the port is in station status; if three or more appear, the port is in trunk status. • Use the Port Type option on the Port Status menu. The Device View port status display will indicate which ports are serving as station ports, and which are serving as trunk ports. A port in station status may actually be connected to multiple devices; station status simply indicates that no more than two devices are currently active. Once port locking is enabled, each port’s topology status (trunk or station) remains fixed and will not change while locking remains enabled, regardless of any changes in the number of source addresses detected. Note, too, that some older versions of firmware use slightly different definitions of station and trunk ports: station ports are defined as those detecting zero or one source address; trunk ports are those detecting two or more. Keep this difference in mind if your device is running an older version of firmware. Locking and Unlocking all Ports on a Repeater Channel You must have Administrative or SuperUser (SU) privileges to lock or unlock ports. The community name used to define the device icon must provide complete access to the device. Repeater Statistics 5-15 Managing Ethernet MicroLAN Modules To lock or unlock all ports on a selected repeater channel: 1. Click on Repeater on the Device View menu bar and select the desired repeater channel, then drag right to display the repeater menu. 2. Click on Lock/Unlock Ports. If the repeater’s ports are already locked, a dialog box informs you that they are locked, and asks if you want to unlock them. If the repeater’s ports are not locked, a dialog box informs you that they are not locked, and asks if you want to lock them. If the lock status for the ports is mixed — that is, some are locked, and some are not — a dialog box reminds you that any actions taken at the repeater level will override any previous port-level lock settings. The window will also informs you that locking ports at the repeater level may cause a trunk port to be locked. Click on the appropriate Yes or No (or Lock or Unlock) button to lock or unlock the ports as desired. If all ports on the channel have been successfully locked (that is, there are no trunk ports on the selected channel which cannot be locked), the lock icon for the selected channel will close and turn red. If you lock ports on a channel which has any unsecurable trunk ports, the lock icon will remain open and turn yellow, indicating a mixed lock status. If an address violation occurs on a locked port, the individual port status box will turn red and display the word OFF, and the port will be locked so that no traffic gets through — not even traffic from known source addresses. Once a port has been shut down because a new source address attempted access, it must be manually re-enabled using the Enable Board option on the appropriate Port Group menu (e.g. Enet-1, Enet-2, or Enet-3), or the Enable option on the appropriate Port menu. NOTE On devices running older versions of firmware, unlinked ports will be immediately disabled after locking has been enabled; these ports can be re-enabled using their Port menus, but they will be immediately disabled again if a device is connected and begins transmitting (since the port’s source address table was locked in an empty state). On devices with newer firmware, unlinked ports are not automatically disabled in response to port locking; but they will also be immediately disabled if a device is connected and attempts to transmit packets. In either case, if you implement port locking on a channel which has unlinked ports, you will need to unlock the ports before connecting them to avoid a violation. 5-16 Repeater Statistics Managing Ethernet MicroLAN Modules Locking and Unlocking Individual Ports On devices running newer firmware, a security option (Security Selection on the Repeater menu and Port Security on the port menu) will be available which lets you set the parameters related to LANVIEWSECURE functionality. However the Ethernet MicroLAN modules have not been factory-equipped with the hardware necessary for LANVIEWSECURE functionality. As a result, setting these parameters has no change on device operation — with one exception — you can use the Lock Ports option to lock and unlock ports. Locking or unlocking ports from the Security Selection window has the same effect as using the Lock/Unlock Ports option on the Repeater menu (since a Repeater channel is restricted to a single group of ports). Locking or unlocking a port from the Port Security window allows you to lock or unlock ports on an individual basis. To lock or unlock an individual port: 1. Click on an individual Port in the Device View; the Port menu will appear. 2. Select Port Security. 3. In the Port Security window, click in the Lock Port check box to set the port’s lock status. If the check box is selected, the port will be locked; if it is empty, the port will remain unlocked. TIP The State displayed at the top of the Port Security window indicates whether or not the port is securable, or lockable: a state of Secure indicates that the port can be locked; a state of NonSecure indicates that it cannot be locked. 4. Click OK in the resulting window to set the new lock state Alarm Limits Using the Alarm Limits windows, you can configure alarm limits for the Ethernet MicroLAN module at the repeater, board, and port levels; these alarms will notify you – via traps sent to NetSight Element Manager’s alarm logging facility – that your system has experienced a certain percentage of collisions or errors, or a certain number of specific packet types, within a user-defined time interval. You can also use the board- and port-level Alarms windows to disable a board or port in response to an alarm condition. NOTE Alarm Limits In order for your device to issue any traps – and in order for your management workstation to receive those traps – your Ethernet MicroLAN module’s trap table must have been properly configured via Local Management; see the Ethernet MicroLAN module hardware manual for more information. 5-17 Managing Ethernet MicroLAN Modules TIP Although you can access the Alarm Limits window at both the repeater and board levels, note that setting alarms at those two levels will have the same effect, as each Ethernet MicroLAN module “board” is equivalent to a repeater channel. Accessing the Alarm Limits Windows To open the repeater-level Alarm Limits window from the Device View: 1. Click on Repeater on the Device View menu bar; a menu listing the available repeater channels will appear. 2. Drag down to select the appropriate repeater channel (A - H), then right to reveal the Repeater menu. 3. Select Alarm Limits. The Repeater Alarm Limits window, Figure 5-6, will appear. Figure 5-6. The Repeater Alarm Limits Window 5-18 Alarm Limits Managing Ethernet MicroLAN Modules To access the board-level Alarm Limits window: 1. Click on the appropriate Module Index to display the Module menu. 2. Drag down to select the appropriate repeater channel (A - H), then right to reveal the board-level Repeater menu. 3. Select Alarm Limits. The Board Alarm Limits window, Figure 5-7, will appear. Figure 5-7. The Board Alarm Limits Window To access the port-level Alarm Limits window: 1. Click once on the appropriate Port to display the port menu. 2. Select Alarm Limits. The Port Alarm Limits window, Figure 5-8, will appear. When using the Alarm Limits screens to set your alarm thresholds, keep in mind that repeater-level thresholds will apply to all traffic received by the selected repeater channel; board-level thresholds will apply only to traffic on the selected board; and port-level thresholds will apply to traffic on the specific port. Alarm Limits 5-19 Managing Ethernet MicroLAN Modules Figure 5-8. Port Alarm Limits Window The Alarm Limits window displays the following fields: Collisions Use the text box in this field to enter the number of collisions per good packet you wish to allow on the selected repeater, board, or port before an alarm is generated; allowable values are 1-15. For example, if you enter a value of 1, the alarm will be generated if the repeater, board, or port experiences an average of one collision per good packet received during the configured time base (see the explanation for “within,” below). In terms of percentages, an alarm threshold value of 1 would generate an alarm if 50% of your packets were collisions (one collision for every good packet); a threshold value of 15 would generate an alarm if 93.75% of your packets were collisions (15 collisions for every good packet). Therefore, the lower you set your threshold value, the lower the percentage of collisions per good packet you are allowing. Remember, a repeater- or board-level alarm will calculate the number of collisions per good packet based on all traffic received on the repeater channel; a port-level alarm will make the calculation based on traffic on the specific port only. 5-20 Alarm Limits Managing Ethernet MicroLAN Modules Packets Use the text box in this field to determine the total number of packets (including all errors except collisions) that must be processed by the repeater, board, or port within the user-specified time before an alarm is triggered. Allowable values are 1 to Ý 4 billion 32 (2 -1). Broadcast Packets Use the text box in this field to determine the number of broadcast packets that must be processed by the repeater, board, or port within the user-specified time before an alarm 32 limit is reached. Allowable values are 1 to Ý 4 billion (2 -1). % Errors of Type Use the text box in this field to determine what percentage of packets received by the repeater, board, or port within the specified time interval can be errors of the selected type or types before an alarm is triggered. Allowable values are one to 100; percentages will be calculated based on the number of error packets of all types selected (all those with an check in their check box). Again, a repeater-level alarm will count all selected error types received by the repeater channel; a port-level alarm will count only selected error types received by the individual port. (Remember, on an Ethernet MicroLAN module, a board is equivalent to a repeater channel.) You can select any combination of the following error types: Alarm Limits CRC Errors If this check box is selected, all packets with Cyclical Redundancy Check (CRC) errors will be included in calculating the overall percentage of errors. Framing Errors If this check box is selected, all misaligned packets will be included in calculating the overall percentage of errors. A misaligned packet is one with a non-integral number of bytes; these are also sometimes referred to as alignment errors. Runts If this check box is selected, the number of runt packets will be included in calculating the overall percentage of errors. A runt packet is one that is less than the minimum Ethernet frame size of 64 bytes. OOW Collisions If this check box is selected, all collisions out of the standard collision window (51.2 µs) will be included in calculating the overall percentage of errors. Out-of-window collisions are typically caused by faulty network design. Giants If this check box is selected, the number of giant packets will be included in calculating the overall percentage of errors. A giant packet exceeds the maximum Ethernet frame size of 1518 bytes (excluding the preamble). 5-21 Managing Ethernet MicroLAN Modules NOTE For more detailed definitions of these statistics and information on the possible network conditions they represent, consult the Enterasys Network Troubleshooting Guide, included with this package. within: This field displays the user-configurable alarm limit timer interval: the amount of time the selected statistics will be counted before being compared to the configured thresholds. The allowable values are 10 seconds to 23 hrs/59 mins/59 secs. Configuring Alarms You configure alarms by choosing the alarm you wish to enable, setting the threshold to the desired level, and selecting a time interval within which that threshold must occur. You can base the alarms on: • • • • Number of collisions per good packet Number of total packets Number of broadcast packets Percentage of error packets You can also configure board or port alarm limits so that the board or port will be disabled when an alarm limit is reached. Setting the Alarm Limits Time Interval To set the time interval within which the defined alarm thresholds must be reached in order to trigger an alarm: 1. Click on the clock symbol next to the within: text box in any one of the alarm limits windows; the interval you set applies to all configured alarms at all levels. The Alarm Interval window, Figure 5-9, will appear. Figure 5-9. The Alarm Interval Window 2. Highlight the hour text box (the first box to the left). 5-22 Alarm Limits Managing Ethernet MicroLAN Modules 3. Click on the up and down arrows to change the time, or type in the new hour time interval. 4. Repeat steps 2 and 3 to set the minutes and seconds of your new time interval. Remember, valid settings range from 10 seconds to 23 hours 59 minutes 59 seconds. 5. Click on the OK button. The new Alarm Interval you have set will appear in the within: text box. 6. Click on the Apply button at the bottom of the Alarm Limits window to save your changes, then click on the Cancel button to close the window. Be sure to click on the Apply button before closing the window, or your changes will not be saved. Setting Alarm Limits To set repeater-, board-, or port-level alarms, first be sure you have opened the appropriate Alarm Limits window, then follow the steps outlined below: 1. Using the mouse, click and drag to highlight the text box in the alarm field you wish to configure (Collisions, Packets, Broadcast Packets, or % Errors). 2. Enter the desired threshold value, being sure to keep in mind the units and range limits described above. 3. Click on the Enable Alarm check box to activate it. (A check box is activated if there is an check in it.) 4. For board- or port-level alarms only, click on the Allow Board/Port to be Disabled on Alarm check box if you wish to disable the board or port when an alarm condition occurs. NOTES If you activate the Allow Board/Port to be Disabled on Alarm option, you will have to manually re-enable the board(s) or port(s) if the alarm is triggered. Resetting the device will clear the condition by clearing all packet counters, but you will still need to re-enable the board(s) and/or port(s). Remember, too, that on an Ethernet MicroLAN module, a board is equivalent to a repeater channel; use care when selecting the Allow Board to be Disabled on Alarm option. 5. Repeat steps 1-4 for each type of alarm you wish to configure. 6. Click on the Apply button to save the configuration, then click the Cancel button to close the window. Be sure to click on the Apply button before closing the window, or your changes will not be saved. Alarm Limits 5-23 Managing Ethernet MicroLAN Modules Your Alarm Limits are now set. Any condition that exceeds these alarm limits will generate an alarm, and disable that board or port, if so configured. Refer to the Element Manager Alarm and Event Handling Guide for information on how to use the alarm logging facilities to view alarms. Trap Selection Among the traps which Enterasys devices are designed to generate are traps which indicate when a repeater port gains or loses a link signal (Link State Traps); when the repeater segments (disconnects) a port due to collision activity, and when a segmented port becomes active again (Segmentation Traps); and several traps that result from changes in a port’s Source Address Table (Source Address Traps). In some networks, these traps may impart more information than a network manager wants to see. With the Trap Selection option available from the Repeater, Board, and Port menus, you can selectively enable and disable these traps. Any traps issued by the Ethernet MicroLAN module will appear in NetSight Element Manager’s alarm logging facility. (Refer to your Alarm and Event Handling Guide for more details.) NOTE In order for your device to issue any traps – and in order for your management workstation to receive those traps – your Ethernet MicroLAN module’s trap table must have been properly configured via Local Management; see the Ethernet MicroLAN module hardware manual or Local Management documentation for more information. Accessing the Trap Selection Windows To open the repeater-level Trap Selection window from the Device View: 1. Click on Repeater on the Device View menu bar, drag down to the appropriate repeater selection, then right to reveal the Repeater menu. 2. Select Trap Selection. The Repeater Trap Selection window, Figure 5-6, will appear. 5-24 Trap Selection Managing Ethernet MicroLAN Modules At the repeater or board level, a three-state check box indicates the state of settings for all ports that are on the repeated network. The check box will be: Grayed – If individual port-level settings have mixed enabled and disabled states for a given trap. Checked – If all port trap settings are enabled for a given trap. Blank – if all port trap settings are disabled for a given trap. Figure 5-10. Repeater Trap Selection Window To access the board-level Trap Selection window: 1. Click on the appropriate Module Index to display the Module menu. 2. Drag down to select the appropriate repeater channel (A - H), then right to reveal the board-level Repeater menu. 3. Select Trap Selection. The Board Trap Selection window will appear. To access the port-level Trap Selection window: 1. Click on the appropriate Port index to display the Port menu. 2. Select Trap Selection. The Port Trap Selection window will appear. The Board Trap Selection window is similar to the Repeater Trap Selection window displayed in Figure 5-10, and serves the same function (since, for the Ethernet MicroLAN module, a “board” is the equivalent of a repeater channel). If all port-level trap settings are uniform at the current level of device management (i.e., a given trap is either set to enabled or disabled for all ports on a repeated network segment), the check box for a given trap will return with an enabled or disabled state, as appropriate. If port-level trap settings are mixed at the current level of management (i.e., a given trap is enabled at some ports and disabled at other ports on the selected repeater channel), the check box for a given trap will be grayed, as illustrated above for Link State traps. When you are changing trap settings at the Repeater or Board level, a check box that is left gray for a given trap is treated as a “No SET” indicator, so that the current settings at the individual port level with respect to that trap will not be overridden when you are changing other trap settings. The Port Trap Selection window is similar to the other Trap Selection windows; however the gray mixed-mode will never appear when you first open the window (since at the port-level, a given trap can only be either enabled or disabled – not some combination of the two). Trap Selection 5-25 Managing Ethernet MicroLAN Modules You can change trap settings from any level window; however, if you have established individual trap settings for any ports, remember that enabling and disabling traps from the repeater- or module-level windows will override those individual setting. Remember, too, that setting trap selection state at the repeater and module levels accomplishes the same thing, as each “board” on the Ethernet MicroLAN module is a repeated network. Trap Definitions You can enable or disable the following kinds of traps: Link State Traps Some Enterasys Ethernet repeater ports – including RJ45 twisted pair and fiber optic ports – generate a link signal to monitor the status of their connection with the device at the other end of the cable segment. If the cable is removed or broken, the port’s link status goes to “No Link” and the repeater generates a portLinkDown trap. When a port in a “No Link” condition receives a link signal, the port goes to a “Link” condition and the repeater generates a portLinkUp trap. Devices at both ends of the disconnected or broken cable will generate the portLinkDown and portLinkUp traps, even when only one end of the cable has been removed. Note that BNC (thin coax), AUI, and transceiver ports do not support a link signal. BNC ports respond to changes in link status by generating portSegmenting and portUnsegmenting traps (see description, below); AUI and transceiver ports do not respond at all to changes in link status (unless the port has been segmented due to excessive collisions), and will always display as on, even if no cable is connected. Information included in a Link State trap will include the board number and port number associated with the trap. Segmentation Traps Enterasys’ Ethernet repeaters count collisions at each port. If a port experiences 32 consecutive collisions, or if the port’s collision detector is on for more than 2-3 µs, the repeater segments the port to isolate the source of the collisions from the rest of the network. When the repeater segments a port, it generates a portSegmenting trap. As soon as a segmented port receives a good packet, the repeater reconnects the port to the network and generates a portUnsegmenting trap. Note that, because they do not support the Link signal, unterminated BNC (thin coax) ports appear as segmented. When you attach a thin coax cable or a terminator to a port, the repeater generates a portUnsegmenting trap; when you remove the cable or terminator, the repeater generates a portSegmenting trap. As mentioned above, these traps can serve as notification of changes in link status. Note, too, that devices at both ends of the cable segment will generate the portSegmenting and portUnsegmenting traps, even if only one end of the cable has been disconnected. Information included in a Segmentation trap will include the board number and port number associated with the trap. 5-26 Trap Selection Managing Ethernet MicroLAN Modules Source Address Traps The Ethernet MicroLAN module can issue several different traps in response to changes in a port’s Source Address Table: A newSourceAddress trap is generated when a station port – one receiving packets from no source addresses, or from one or two source addresses – receives a packet from a source address that is not currently in its source address table. Information included in this trap includes the module number, port number, and source address associated with the trap. Trunk ports – those receiving packets from three or more source addresses – will not issue newSourceAddress traps. NOTE Some older repeater devices, and devices with older versions of firmware may include a slightly different definition of station and trunk status: station ports are defined as those receiving packets from zero or one source addresses; trunk ports are defined as those receiving packets from two or more source addresses. If you have any questions about whether your device or firmware version falls into this older category, or if you would like information about upgrading your device firmware, contact the Enterasys Global Call Center. A sourceAddressTimeout trap is issued anytime a source address is aged out of the Source Address Table due to inactivity. The trap’s interesting information includes the module and port index, and the source address that timed out. PortTypeChanged traps are issued when a port’s topology status changes from station to trunk, or vice versa. The interesting information includes the module and port index, and the port’s new topology status. A lockStatusChanged trap is generated when the ports in the hub are locked or unlocked using the Lock/Unlock Ports option on the Repeater menus; the interesting information is the new lock status. PortSecurityViolation and portViolationReset traps are sent in response to changes related to port locking: if ports are locked, the portSecurityViolation trap indicates that a new source address has attempted access on one of the ports, and the ports are being shut down in response; the interesting information is the module and port index, and the violating address. PortViolationReset traps are sent when management intervention has re-enabled a port or ports previously disabled in response to a port security violation; the interesting information is module and port index. Configuring Traps The current status (enabled or disabled) for Link State, Segmentation, and Source Address traps will always be displayed in the port-level Trap Selection window. The repeater- and board-level windows will display current settings if they are uniform; where settings are not uniform at the selected level, the corresponding check box will be gray. When you configure traps, keep in mind the hierarchy of levels at which you are setting traps; for the Ethernet MicroLAN module, traps set at the repeater or board level will override current port-level settings for all ports on that repeater channel. Trap Selection 5-27 Managing Ethernet MicroLAN Modules TIP When you are setting repeater- or module-level traps, we recommend that you leave the gray “No SET” status untouched (especially for Source Addressing Traps) unless you are sure you want to override port-level settings. With no incoming traps to inform you of a port security violation, you may have ports that are disabled on your device for no obvious reason. To enable or disable the above-described traps: 1. Open the appropriate Trap Selection window. 2. Click on the check box next to the desired trap: Link State, Segmentation, or Source Address. An empty check box indicates that the corresponding trap is disabled; A checked box indicates that the corresponding trap is enabled; A check box that remains gray indicates that the associated trap will not be set (to either enabled or disabled), and the current mode of mixed settings at the port level will be maintained. 3. Click on the Apply button. The device will now issue, or stop issuing, the indicated traps to your management workstation. Keep in mind, however, that no traps will be issued to your management station unless the Ethernet MicroLAN module’s trap table has been properly configured via Local Management. Consult your Local Management documentation for more information. 4. Click on the Cancel button to exit the window; note that clicking on the Cancel button before clicking on the Apply button will close the window without making any changes. 5-28 Trap Selection Chapter 6 FDDI Management Concentrator configuration; connection policy; station list; concentrator performance; FDDI statistics; frame translation The FDDI menu lets you access windows to view a SmartSwitch 6000 or Matrix E7 module’s FDDI configuration, connection policy, station list, and performance with respect to each Station Management (SMT) entity present on an installed HSIM-F6 High Speed Interface Module. You can also configure your module’s frame translation settings using the Frame Translation window. The Device view for a SmartSwitch 6000 or Matrix E7 with an installed HSIM-F6 will also offer a FDDI Statistics window, which can be launched from the Device menu. SMT provides the system management services for the FDDI protocols, including connection management, node configuration, error recovery, statistics collecting, and management frame encoding. SMT is comprised of various subcomponent functions, including Connection Management (CMT) and Ring Management (RMT); one SMT entity will be present for the ring connected to the HSIM-F6. NOTE The FDDI menu and associated management windows will only appear if you have an HSIM-F6 installed in an Ethernet SmartSwitch module. Viewing FDDI Information The windows that provide information about the FDDI ring connected to the SmartSwitch module are: • Configuration — This window displays the current configuration and status of the ring associated with the selected SMT entity. 6-1 FDDI Management • Connection Policy — This window shows the types of connections between the four FDDI PHY (port) types — A, B, M, and S — that will be allowed by the SMT entity. • Station List — With this window you can see the configuration of the ring on which the SMT entity resides, including number of nodes, node addresses (both Canonical and MAC), node class, and current ring topology. • Performance — This window lets you view the number of frames transmitted and received on the ring as detected by the selected SMT entity, along with error and lost frames, and the number of ring initializations. • FDDI Statistics — This window allows you to view various traffic-related statistics for each SMT entity present on the device. To access FDDI information (except FDDI Statistics): 1. In the Device View window, click on FDDI. 2. Click on the SMT entity of interest and then right to reveal the FDDI menu (Figure 6-1). Figure 6-1. The FDDI Menus 3. Select the desired window. TIP The title bar of each window will display the index number of the SMT entity whose information is being displayed. To access the FDDI Statistics window: 1. In the Device View window, click on Device to display the Device menu. 2. Select FDDI Statistics. 6-2 Viewing FDDI Information FDDI Management Configuration The Concentrator Configuration window, Figure 6-2, informs you about the configuration and operating state of the FDDI ring associated with the selected SMT entity, and displays parameters relating to ring initialization. Figure 6-2. The Concentrator Configuration Window MAC State This field indicates the current state of the selecting ring’s MAC component. (The RMT component of SMT monitors MAC operation and takes actions necessary to aid in achieving an operational ring.) Possible states are: Not Available There is no MAC on the FDDI ring associated with the SMT entity. Ring-Op The ring is functioning normally. While in this state, the MAC being managed is part of an operational FDDI ring. Isolated SMT has just initialized RMT or RMT has entered this state during a path test (trace) after ring beaconing; RMT is not aware of the ring path or state. Non-Op The MAC being managed by the selected SMT is participating in ring recovery; the ring is not operational. Detect The claim (beacon) process of the FDDI ring protocol has exceeded one second. There may be a problem on the ring; any duplicate address conditions are being detected. In this state, the ring is still alive, but no data is being transmitted. Non-Op-Dup The ring is not operational; the address of the MAC under control of the SMT entity has been found to duplicate that of another MAC on the ring. The duplicate address condition prevented ring recovery and initialization after a claim and Viewing FDDI Information 6-3 FDDI Management beacon process. This state will not occur unless you are using locally-administered addresses, as factory-set MAC addresses are guaranteed to be unique. Ring-Op-Dup The ring is operational; however, the address of the MAC under control of the SMT entity has been found to duplicate that of another MAC on the ring. Corrective actions will be attempted before the duplicate address condition causes ring initialization to fail after the claim and beacon recovery process. Like Non-Op-Dup, this state will not occur unless you are using locally-administered addresses. Directed The beacon process did not complete within 7 seconds. The selected SMT has directed the controlled MAC to send beacon frames to notify the other stations that a serious problem exists on the ring, and a Trace state is soon to follow. Trace A problem exists on the ring which could not be corrected during the beaconing process, and a Trace has been initiated. During a Trace (or Path Test), the SMT sends a signal that forces its nearest upstream neighbor to remove from the ring and conduct a self-test. If the ring does not recover, each subsequent upstream station will be forced to remove from the ring and conduct self-tests until the problem has been corrected. While the test is being conducted, ring management re-enters the isolated state. SMT Version Displays the version number of the Station Management (SMT) entity. SMT provides the system management services for the FDDI protocols, including connection management, node configuration, error recovery, and management frame encoding. SMT frames have a version ID field that identifies the structure of the SMT frame Info field. The version number is included in the SMT frame so that a receiving station can determine whether or not its SMT version is able to communicate with the SMT version of another station. Knowing the version number allows the stations to handle version mismatches. Each FDDI station supports a range of SMT versions. The supported version range is identified within the ietf-fddi MIB by two smtTable attributes: snmpFddiSMTLoVersionId and snmpFddiSMTHiVersionId. If a received frame is not within the supported version range, the frame is discarded. T-Req. (Requested Target Token Rotation Time) The token rotation time bid made by the selected SMT entity during ring initialization. Each station detecting that the ring must be initialized begins a claim token process and issues a stream of Claim Frames, which negotiate the value assigned to the Target Token Rotation Time (TTRT). The information field of these frames contains the issuing station’s bid for the value of TTRT. Each claiming station inspects incoming Claim 6-4 Viewing FDDI Information FDDI Management frames (from other issuing stations) and either continues its own bid (and removes the competing Claim Frame from the ring) or defers (halts transmission of its own bid and repeats the competing bid) according to the following hierarchy of arbitration: • A Claim Frame with the lowest TTRT bid has precedence. • If the values of TTRT are equal, the frame with the longest source address (48 vs. 16 bits) has precedence. • If both TTRT value and source address length are equal, the frame with the highest address has precedence. The HSIM-F6 is shipped with a default T-Req of 6 msec. T-Req is stored within the MIB in units of nanoseconds (one billionth of a second) rather than milliseconds (one thousandth of a second); NetSight Element Manager converts nanoseconds to milliseconds for display purposes. You can use any SNMP Set Request tool to edit the T-Req value; just remember that you must enter your value in nanoseconds, rather than milliseconds. T-Neg. (Negotiated) The winning time negotiated in the ring initialization sequence. Concentrator M Ports This field displays the number of Master (M) ports on the device that are associated with the selected SMT entity. A Master port is a port that provides a connection for Single Attachment Station (SAS) devices to the FDDI network. The HSIM-F6 does not support M ports, so this field will always display 0. Concentrator Non-M Ports This field display the number of non-Master ports (A, B, or S ports) on the device that are associated with the selected SMT entity. As each HSIM-F6 module has a single A /B port pair supporting a single ring (and, therefore, a single SMT entity), this field will display 1. Number of MACs The number of Media Access Control entities present on the device associated with the selected SMT entity. For the HSIM-F6, this number will be 1. MAC Path Indicates the configuration of the MAC in respect to the logical ring, as determined by the Connection Management (CMT) portion of SMT. CMT controls the establishment of a media attachment to the FDDI network, the connections with other nodes in the ring, and the internal configuration of the various entities within a node. CMT provides the link confidence test, and specifies a Link Error Monitor (LEM) which monitors active links on a per-link basis to ensure that failing links are detected and, if required, removed from the network. Possible values are: • Primary indicates that the MAC is inserted into the primary path of the currently used FNB ring. • Secondary indicates that the MAC is inserted into the secondary path of the currently used FNB ring. Viewing FDDI Information 6-5 FDDI Management • Local means that the MAC is not inserted into a primary or secondary path of a dual ring, but may be connected to one or more other nodes. This is not a valid value for the HSIM-F6. • Isolated means that the MAC has no connection to the ring or other concentrator ports. • Not Available means that there is no MAC on the FDDI ring associated with the selected SMT entity. Again, this state will not occur for the HSIM-F6. • Unknown means that device firmware cannot determine the MAC path. • ? indicates that NetSight Element Manager cannot determine the MAC path for the selected ring. Ring Configuration The current configuration of the MAC and physical layers of the A and B ports. Connection Policy The SMT Connection Policy of an FDDI concentrator determines which types of connections are allowed among the four FDDI port types: A, B, M (Master), and S (Slave). FDDI protocol forbids Master—>Master connections; all other connection types are legal, although some are considered to be undesirable. The Connection Policy window, Figure 6-3, lists potential connection types in a “Reject X-Y” format, where X represents a port on the HSIM-F6, and Y represents the attaching node. A checkmark in the check box next to a Connection Policy indicates that the connection has been disallowed. Figure 6-3. The Connection Policy Window 6-6 Viewing FDDI Information FDDI Management The following table summarizes the FDDI connection rules: Table 6-1. FDDI Connection Rules V X U P ! A B S M A V, U V V, U V, P B V V, U V, U V, P S V, U V, U V V M V V V X —valid connection —illegal connection —undesirable (but legal) connection; this requires that SMT is notified. —valid, but when both A and B are connected to M ports (a dual-homing configuration), only the B connection is used. Though technically legal under FDDI connection rules, undesirable connections will cause a twisted or wrapped ring. CAUTION Each SMT entity maintains its own connection policy; however, when two interfaces attempt to connect, their combined established connection policies dictate the connections that will be allowed. In an attempted connection between two nodes, the most lenient policy will determine whether the connection (as long as it is legal) can be made. For example, if two FDDI nodes attempt an A—>A connection, and this connection is not allowed at one FDDI node but allowed at the other, the connection would be accepted. If the connection policy at both nodes disallows the connection, the connection will be rejected. This is a read-only window; you currently cannot edit the HSIM-F6’s connection policy via NetSight Element Manager. Viewing FDDI Information 6-7 FDDI Management TIP You can use any SNMP Set Request or MIB tool to edit the Connection Policy for your device by setting the fddimibSMTConnectionPolicy MIB OID (part of the MIBII FDDI Transmission MIB (RFC1512). fddimibSMTConnectionPolicy is simply a 16-bit integer value (ranging from 32768 to 65535) that corresponds to the connection policy (in the “Reject X-Y” format, where X represents a port on the FDDI Switch Module, and Y represents the attaching node). To set the connection policy for the device, total the bit values corresponding to the desired connection policy according to the table below, and then use your SNMP Set Request or Mib tool to set the value for the appropriate SMT index. For example, to set a connection policy that disallowed the undesirable A-A or B-B connections you would set the fddimibSMTConnectionPolicy MIB OID to 32,801: 32,768 (reject M-M, required) + 32 (reject B-B) + 1 (reject A-A). Policy reject A-A reject A-B reject A-S reject A-M reject B-A reject B-B reject B-S reject B-M reject S-A reject S-B reject S-S reject S-M reject M-A reject M-B reject M-S reject M-M 6-8 Power 20 (1) 21 (2) 22 (4) 23 (8) 24 (16) 25 (32) 26 (64) 27 (128) 28 (256) 29 (512) 210 (1,024) 211 (2,048) 212 (4,096) 213 (8,192) 214 (16,384) 215 (32,768 — a permanently set value for this bit) Viewing FDDI Information FDDI Management Station List The Station List illustrates the configuration of the ring associated with the currently selected SMT entity, including number of nodes on the ring, node addresses (both Canonical and MAC), node class, and ring topology. Figure 6-4. The Station List Window The Station List provides the following information about the ring with which the SMT is currently associated: Number of Nodes The number of stations inserted into the FDDI ring with which the SMT entity is currently associated. Address Mode Displays the current mode being used to display the addresses of the devices in the Station List. The two possible modes are Canonical (FDDI) or MAC (Ethernet). To change the current Address Mode, click on the Address Mode button at the bottom of the window. The current address mode will change in the Address Mode field and the Stations panel. Viewing FDDI Information 6-9 FDDI Management Stations Panel The Stations Panel displays a list of the stations on the ring to which the selected SMT is connected, in ring sequence from the MAC, along with each station’s node class and current topology. Note that the information displayed in the Station List is static once the window is opened; for updated information, click on the Refresh button. If the number of nodes exceeds the panel size, scroll bars will appear in the list box that will allow you to scroll through the station list to view the node of interest. Information provided in the Stations Panel includes: # An index number assigned to each station that indicates its position on the ring in relation to the monitored SMT’s MAC address. The monitored SMT’s MAC is always the first entry (1) in the station list. MAC Address Displays the 48-bit hardware address —þused for universal address assignment —þof the node inserted into the ring. These addresses are hardcoded into the device, and are not configurable. The address will appear in Canonical or MAC format, as currently selected. Node Class Displays the type of ring device. Possible values are: Station Indicates an FDDI node capable of transmitting, receiving, and repeating data. Concentrator Indicates an FDDI node that provides attachment points to the ring for stations that are not directly connected to the dual ring. Topology Indicates the node’s MAC configuration topology. Upstream Neighbor Displays hardware address (in Canonical or MAC format, as currently selected) of each node’s upstream neighbor. 6-10 Viewing FDDI Information FDDI Management Performance The Concentrator Performance window, Figure 6-5, provides graphical and numeric performance statistics for the selected SMT entity, including transmit frames, receive frames, frame errors, lost frames, and ring ops. Figure 6-5. The Concentrator Performance Window Statistics are displayed in three ways: • By count (i.e., the number detected of each for the selected interval). • By rate (i.e., the number of each per second, as averaged over the selected interval). • Graphically, as a percentage of each with respect to total network load processed by the HSIM-F6 interface during the last interval (e.g., a transmit frames rate of 75% during a delta interval indicates that of all frames processed by the selected interface, 75% were transmitted by that interface). You can view the concentrator performance for three different intervals: • Absolute — Counts recorded since the SmartSwitch module was last started. • Cumulative — Counts recorded since the Concentrator Performance window was opened. • Delta — Counts recorded during a single polling interval (refer to the Element Manager User’s Guide for information on setting the polling interval). To change the interval, click to select the desired radio button in the Count Display panel in the top right hand corner of the window. Viewing FDDI Information 6-11 FDDI Management Available statistics are: Transmit Frames The number of frames transmitted by the MAC associated with the SMT during the chosen interval. Receive Frames The number of frames received by the MAC associated with the SMT during the chosen interval. Frame Errors The number of error frames detected by the MAC associated with the SMT during the chosen interval that had not been detected previously by other stations. Error frames may include frames with an invalid Frame Check Sequence (FCS), with data length errors, or with internal errors that prevent the MAC from transferring the frame to the Logical Link Control (LLC) layer. Lost Frames The number of frames detected by the MAC associated with the SMT during the chosen interval that have an unknown error, so their validity is in doubt. When the MAC encounters a frame of this type, it increments the Lost Frame counter and strips the remainder of the frame from the ring, replacing it with idle symbols. Ring Ops The number of times the ring has entered the “Ring Operational” state from the “Ring Not Operational” state during the selected interval. This counter updates when the MAC informs Station Management (SMT) of a change in Ring Operation status. FDDI Statistics The FDDI Statistics window displays traffic statistics for the HSIM-F6’s SMT entity, including the number of frames and kilobytes per second (averaged over a defined poll rate), the peak number of kilobytes per second, and the module’s bandwidth utilization (expressed as a percentage) for the current poll interval. To access the FDDI Statistics window: 1. In the Device View window, click on Device to display the Device menu. 2. Select FDDI Statistics. The FDDI Statistics window (Figure 6-6) will appear. 6-12 Viewing FDDI Information FDDI Management Figure 6-6. The FDDI Statistics Window The FDDI Statistics window displays the following information for the module: SMT# This field displays the index number of Station Management (SMT) entity for the HSIM-F6. Frames/sec The number of frames/second (averaged over the specified poll interval) transmitted by the indicated SMT. KBytes/sec The number of kilobytes/second (averaged over the specified poll interval) transmitted by the indicated SMT. Peak KBytes/sec The peak number of kilobytes/second transmitted by the indicated SMT, as detected over all polling intervals since monitoring began (i.e., since the FDDI Statistics window was first opened). %Util The percentage of utilization of available bandwidth by the indicated SMT over the current poll interval; the percentage is calculated by dividing the actual number of transmitted bytes/sec into the maximum number of bytes/sec that could be transmitted (125,000,000 bytes/sec potential on a 100 Megabit/second ring). Viewing FDDI Information 6-13 FDDI Management Setting the FDDI Statistics Poll Rate To set the FDDI Statistics poll rate: 1. Click on the clock symbol ( ) next to the Poll Rate (sec) text box. The New Timer Interval text box, Figure 6-7, will appear. Figure 6-7. New Timer Interval Text Box 2. Using the mouse, click to highlight the hour field in the New Timer Interval text box. 3. Using the arrow keys to the right of the text box, scroll to change the hour, as desired. Notice that the time is given in a 24-hour hh:mm:ss format. 4. Using steps 2 and 3, continue to change the minutes and seconds fields, as desired. 5. Click on OK when you are finished entering new information. The new Poll Rate you have set is now entered. The FDDI Statistics window will refresh, and the new time interval will take effect immediately. Configuring FDDI Frame Translation Settings The HSIM-F6 interface must be configured to translate packets from an FDDI frame format to an Ethernet frame format (and vice versa) when bridging packets between FDDI and Ethernet networks. The Frame Translation window lets you set the parameters for frame translation. To access the FDDI Translation window (Figure 6-8): 1. In the Device View window, click on FDDI to display the FDDI menu. 2. Select Frame Translation. 6-14 Configuring FDDI Frame Translation Settings FDDI Management Figure 6-8. The Frame Translation Window Information about Ethernet and FDDI Frame Types There are four frame types which can be transmitted on an IEEE 802.3/Ethernet network – Ethernet II, Ethernet 802.2, Ethernet 802.3 (or Raw Ethernet), and Ethernet SNAP; there two frame types which can be transmitted on an FDDI network: FDDI 802.2 and FDDI SNAP. Each of these frame types is described in more detail in the sections that follow. Bridges connecting IEEE 802.3/Ethernet LANs to an FDDI ring have to provide frame translation, as there are addressing and frame format differences between the two network topology types. For an Ethernet frame format to be forwarded onto an FDDI network, the Length (IEEE 802/SNAP) or Type (Ethernet II) field must be removed (along with any frame padding), an FDDI Frame Control field must be added, the bit-order of the address fields must be reversed, and the frame’s CRC field must be recomputed. In most instances, the IEEE 802.3/Ethernet frame format is translated automatically into the appropriately corresponding FDDI frame format. Ethernet 802.2 frames are translated to FDDI 802.2 frames; Ethernet II frames are translated to FDDI SNAP frames; non-AppleTalk Ethernet SNAP frames are translated to FDDI SNAP frames; and AppleTalk Ethernet SNAP frames are translated to FDDI SNAP frames (AppleTalk format). However, because Ethernet Raw frames do not have a Type or Length field, and can’t be automatically translated onto an FDDI network, you must select the appropriate translation method to an FDDI frame format (for transmitting to FDDI stations or for bridging back to an Ethernet network). Configuring FDDI Frame Translation Settings 6-15 FDDI Management If the frame is exiting the FDDI ring through another FDDI/Ethernet bridge, the FDDI frame must be converted back into an IEEE 802.3/Ethernet frame. As there are four potential Ethernet frame types to which the two FDDI frame types can be translated, you must determine which translation options you want in effect — depending on which network protocols and applications are being run on the destination network. In addition, there are frame size differences between FDDI (which allows a maximum frame size of 4500 bytes) and Ethernet frames (1518 byte maximum, excluding preamble), so FDDI frames may need to be fragmented before being bridged onto an Ethernet network. The Frame Translation window lets you set the parameters for frame translation and fragmentation when Ethernet traffic needs to traverse an FDDI ring. The frame types that you select for translation will depend on which higher-layer communications protocols and software you are running on the network segments connected to your Ethernet-to-FDDI bridge. Eframesach frame type and its usage is described below. Ethernet Frames The HSIM-F6 supports translation of the following four Ethernet frame types: Ethernet II Ethernet II is the Novell® NetWare™ designation for the basic Ethernet frame type (also commonly referred to as Ethernet or Ethernet DIX). This frame format has an Ethernet II MAC header with a two byte Ethernet Type field. The Type field contains a protocol ID which indicates the upper layer protocol (e.g., XNS, DECnet, TCP/IP, etc.) used in the Data field of the packet. Most current transmission protocols, including TCP/IP, use the Ethernet II frame format, as do networks running Apple’s AppleTalk 1 protocol and Digital’s DECnet™ protocol. Note that the Type field of an Ethernet II frame will always have a decimal value greater than 1500, so that it can be differentiated from the Length field of Ethernet 802.2 frames (described below). Ethernet 802.2 The Ethernet 802.2 frame format is the IEEE 802.3 formalization of the original Ethernet frame format. This frame format is similar to the Ethernet II frame format, except that the two byte Type field is eliminated and replaced with a two byte Length field, and an 802.2 LLC header is encapsulated within the 802.3 frame. This LLC header contains the destination and source addressing information for the LLC frame (DSAP and SSAP), and a one byte Control field (the LSAP – or LLC Service Access Point value) which provides the frame’s protocol ID. Ethernet 802.2 packets are differentiated from Ethernet II packets because the Length field will always have a decimal value of 1500 or less (since the data field in Ethernet frames cannot be greater than 1500 bytes), and the Ethernet II Type field will always be greater than 1500 decimal. This is the default frame type for Novell NetWare software version 3.12 and beyond; it is also used for OSI packets on IEEE 802.x LAN networks. 6-16 Configuring FDDI Frame Translation Settings FDDI Management Ethernet 802.3 (Ethernet Raw) The Ethernet 802.3 frame format has an 802.3 MAC layer header (as do Ethernet 802.2 frames); however, it does not contain an 802.2 LLC header. Instead, Novell IPX is fixed within the packet as the network layer protocol. This frame type – also known as Raw 802.3 – is the default frame type for Novell NetWare software before version 3.11. Since these frames do not carry the 802.2 header, they do not conform to the IEEE 802.3 specification. If you are using the Ethernet 802.3 Raw frame format, you should consider upgrading your Novell NetWare software to ensure interoperability with other communications protocols (unless your current network is not likely to be upgraded, and has no interoperability problems). Note that IPX packets with checksums which provide data integrity (a feature of newer Novell NetWare releases) cannot be transmitted on Ethernet 802.3 networks. Note also that a single Ethernet can carry both Ethernet 802.3 and Ethernet 802.2 traffic simultaneously. The Novell software will treat the two frame types as two logical networks (and function as an IPX router between the two networks). Ethernet SNAP To allow for proprietary protocols, such as IBM’s SNA protocol, the Ethernet SNAP frame was created. This frame format extended the Ethernet 802.2 packet by improving the frame’s byte alignment, and by allowing further protocol identification than the one byte LSAP protocol identifier of Ethernet 802.2 frames (which is reserved for standard protocols). Ethernet SNAP packets have an LSAP protocol ID of hex AA, indicating that they contain a SNAP (Subnetwork Access Protocol) packet. A SNAP packet, encapsulated within the Ethernet 802.2 packet, has a five byte SNAP header which is simply a five byte protocol identifier. The first three bytes of the header indicate the Organizationally Unique Identifier (OUI) – or the authority assigning the protocol ID – and the last two bytes indicate the protocol according to that authority. Note that for most protocols, the OUI is 0-0-0, and the type identifier is the standard Ethernet protocol ID. Although most Ethernet transport protocols use the Ethernet II frame format, the AppleTalk II protocol uses Ethernet SNAP (AppleTalk has its own unique OUI). FDDI Frames There are two legal FDDI data frame types: FDDI 802.2 The FDDI 802.2 frame type has two headers: the FDDI header (which includes the Frame Control field that indicates the class of frame, length of the address field, and the type of FDDI frame), and the 802.2 header. FDDI SNAP The FDDI SNAP frame type has an FDDI header with a Frame Control field that provides FDDI framing information, and the 802.2 LLC header with FDDI Frame Control, a SNAP LSAP identifier, and a five byte protocol identifier. There is no FDDI equivalent for Ethernet 802.3 Raw frames or Ethernet II frames. Enterasys’ Ethernet/FDDI bridges will automatically translate Ethernet II frames into Configuring FDDI Frame Translation Settings 6-17 FDDI Management FDDI SNAP frames, by identifying it as a SNAP frame in the LLC header, and inserting a SNAP header with the Ethernet Type field. By default, Enterasys’ Ethernet-to- FDDI bridges will translate an 802.3 Raw frame into an FDDI MAC frame – although you can use the FDDI Frame Translation window to alter the default translation. The FDDI MAC frame is an FDDI frame type that is defined for internal use by the MAC layer, and which is not passed to higher layer communications protocols on the datalink layer. Any 802.3 Raw frame translated into FDDI MAC will be recognized as such by other Enterasys (and many other vendor’s) Ethernet/FDDI bridges inserted in the ring, and will be forwarded onto the target Ethernet segment as an 802.3 Raw frame. FDDI Frame Translation Options The FDDI Translation window lets you select which translation methods you want enforced when translating frames from an FDDI frame format into an Ethernet frame format, and when translating Ethernet Raw frames into FDDI frames. It also lets you choose whether to allow fragmentation of IP datagrams into smaller datagrams, and enable or disable the Auto Learn Novell Frame Translation option. To set frame translation parameters: 1. Click on the selection boxes of interest (described below), and select the desired translation options. 2. Click Apply to save your new frame translation settings at the device, or click Cancel to restore the last saved options. IP Fragmentation The IP Fragmentation selection box lets you specify frame fragmentation parameters. FDDI traffic may need to be split, or fragmented, into two, three, or four smaller frames to be successfully transmitted on an Ethernet network. For fragmentation to be allowed, the frame must be an FDDI SNAP frame with an OUI of 00-00-00 (indicating TCP/IP) and an IP protocol type identifier (08-00). Possible options are Enabled (allow IP fragmentation – the default) or Disabled (prevent IP fragmentation, and discard frames over 1518 bytes). Translate all Non-Novell FDDI SNAP frames to This selection box lets you set the translation parameters for non-Novell FDDI SNAP frames. Possible options are Ethernet II (the default, which you should use when bridging to most TCP/IP networks) or Ethernet SNAP (which you should use when bridging to an AppleTalk environment on Ethernet). Translate all Ethernet Raw frames to This selection box lets you set the translation parameters for Ethernet Raw (Ethernet 802.3) packets. Ethernet Raw frames are used on networks running the IPX protocol on Novell NetWare versions prior to 3.12. Possible options are FDDI 802.2, FDDI SNAP (generally used when bridging to an AppleTalk environment on an FDDI ring), or FDDI MAC (the default option, which translates the frame into an FDDI MAC frame – which will not recognized as a data frame on an FDDI ring, but will be recognized by a Enterasys Ethernet/FDDI bridge). 6-18 Configuring FDDI Frame Translation Settings FDDI Management Translate all Novell FDDI SNAP frames to This selection box lets you set the translation parameters for Novell IPX FDDI SNAP frames. Possible options are Ethernet II (default, for most TCP/IP traffic), Ethernet SNAP (AppleTalk networks), Ethernet 802.3 (some NetWare 3.12+ or other networks running an ISO/OSI protocol stack), or Ethernet 802.3 Raw (NetWare 3.11 and earlier networks). Translate all Novell FDDI 802.2 frames to This selection box lets you set the translation parameters for Novell IPX FDDI 802.2 frames. Possible options are Ethernet II, Ethernet SNAP, Ethernet 802.3 (default), or Ethernet 802.3 Raw. Translate all Novell FDDI MAC frames to This selection box lets you set the translation parameters for Novell IPX FDDI MAC frames (i.e., received from a NetWare 3.11 or earlier network, and translated into FDDI MAC frames). Possible options are Ethernet II (most TCP/IP networks), Ethernet SNAP (AppleTalk Networks), Ethernet 802.3 (some NetWare 3.12+ and other networks running an ISO/OSI protocol stack), or Ethernet 802.3 Raw (default – NetWare 3.11 or earlier networks). Auto Learn Novell Frame Translation Some of Enterasys’ FDDI/Ethernet bridges can automatically learn the appropriate frame translation type by the source address received at the Ethernet interface. If this option is enabled, Novell IPX frames destined to a previously learned source address will be translated to the appropriate frame type for that address (as determined by its previously transmitted frames). If the destination address is unknown, the default frame translation will be used for the frame. Possible options are Enabled or Disabled. Configuring FDDI Frame Translation Settings 6-19 FDDI Management 6-20 Configuring FDDI Frame Translation Settings Chapter 7 ATM Configuration Viewing connection data; configuring Permanent Virtual Circuits (PVCs); adding and deleting connection entries The ATM interface provided by the HSIM-A6DP module provides the connectivity that allows you to merge ATM network segments with traditional LAN technologies via the SmartSwitch 6000 or Matrix E7 chassis backplane. Current versions of HSIM-A6DP firmware use 802.3 VC-based multiplexing for bridging protocols to move PVC traffic between the ATM front panel connection and the switching backplane; future versions will add support for ATM Forum LAN Emulation and Enterasys’ SecureFast Switching. An ATM network uses two types of virtual channels, or circuits: Switched Virtual Circuits, or SVCs, and Permanent Virtual Circuits, or PVCs. SVCs are created and dismantled dynamically on an as-needed basis, and require no management definition; PVCs, however, must be manually configured. The Current ATM Connections window provides the means for accomplishing these configurations. Accessing the ATM Connections Window To access the ATM Connections window from the Device View: 1. Click on Device on the Device View menu bar to access the Device menu. 2. Select ATM Connections. The Current ATM Connections window, Figure 7-1, will appear. TIP Note that the ATM Connections option will only be available if at least one HSIM-A6DP is installed in the module. 7-1 ATM Configuration Figure 7-1. The Current ATM Connections Window The Current ATM Connections window provides the following information about the device’s ATM connections: Connection Data The Connection Data fields provide the following information about each ATM interface available on the device: 7-2 I/F Displays the index number assigned to each HSIM-A6DP interface installed in a SmartSwitch 6000 or Matrix E7 module. Maximum Connections Displays the maximum number of connections allowed by current device firmware. Current Configured Displays the number of Permanent Virtual Circuits, or PVCs, currently configured. Accessing the ATM Connections Window ATM Configuration Settings The Settings portion of the window contains a list box which displays information about each of the currently configured PVCs, as well as the fields used to configure new connections: I/F The device interface on which the PVC was configured. VPI Displays the Virtual Path Identifier assigned to the connection; current versions of HSIM-A6DP firmware allow values from 0-3. Virtual Path Identifiers are used to group virtual connections, allowing for channel trunking between ATM switches. Each VPI can be configured to carry many different channels (designated by VCIs) between two points. VCI Displays the Virtual Channel Identifier assigned to the connection; allowable values are 0-1023 for each VPI. Each assigned VCI must be unique within its defined VPI: for example, you can assign a VCI of 14 as many as four times: once with a VPI of 0, once with a VPI of 1, and so on. Remember, it is the combined VPI and VCI designations assigned to a channel that creates the grouping of virtual connections. Encapsulation Type Displays the method used to encapsulate LAN packets on the selected circuit. Current versions of HSIM-A6DP firmware use 802.3 VC-based multiplexing for bridging protocols (designated VC MUX 802.3 Bridged); future versions will add support for ATM Forum LAN Emulation and Enterasys’ SecureFast Switching. You may also see some connections assigned a type of “other”; these are default connections that cannot be modified or deleted. Status Displays the current administrative status of the connection: enabled or disabled. In current versions of firmware, all connections are enabled by default, and cannot be disabled. UpTime The length of time the selected connection has been enabled. Add Selecting the Add button either adds a new connection or modifies an existing one, using the parameters entered in the fields below the list box. A confirmation window will appear for both additions and modifications. Delete Selecting the Delete button deletes the selected connection; a confirmation window requires that you confirm the deletion. Refresh Selecting Refresh refreshes the connection information displayed in the window. Accessing the ATM Connections Window 7-3 ATM Configuration Configuring Connections You can add a new connection or delete an existing connection as described in the following sections. Adding a New Connection To configure new Permanent Virtual Circuits (PVCs), enter the following information in the text fields which appear just below the connections list box: 1. In the I/F text box, click on the down-arrow to the right of the text field, and select the interface for which you wish to configure a connection. All available ATM interfaces will be listed in this menu. 2. In the VPI text box, enter the Virtual Path Identifier you wish to assign to this connection. Allowable values are 0 to 3; remember, the VPI you assign will be used to group virtual connections, allowing for channel trunking between ATM switches. 3. In the VCI text box, enter the Virtual Channel Identifier you wish to assign to this connection. Allowable values are 0 to 1023 for each VPI. For example, you could assign the same channel identifier — say, 25 — as many as four times: once with a VPI of 0, once with a VPI of 1, and so on. Again, remember that it is the combination of VPI and VCI that will be used to direct cells through the intermediate switches between the source and destination. 4. In the Encapsulation Type field, click on the down arrow located to the right of the field, and select the desired encapsulation type. Current versions of HSIM-A6DP firmware use 802.3 VC-based multiplexing for bridging protocols (designated VC MUX 802.3 Bridged); future versions will add support for additional encapsulation methods. TIP Selecting any of the other encapsulation types listed in the field’s menu will cause a “Set Failed” error when you attempt to add the new connection. 5. Click the Add button to add the new permanent circuit to the ATM interface. The circuit is automatically enabled, and will remain in place until it is manually removed. Deleting a Connection To delete an existing PVC: 1. In the connections list box, click to select the connection you wish to delete. 7-4 Configuring Connections ATM Configuration 2. Click on the Delete button. A confirmation window will appear, listing the parameters assigned to the connection and asking you to verify that you wish to delete it. Click on the OK button to confirm your selection, or on the Cancel button to undo it. Configuring Connections 7-5 ATM Configuration 7-6 Configuring Connections Chapter 8 HSIM-W87 Configuration Configuring the T3 interface; configuring T1 connections; setting priority IP Addresses The HSIM-W87 is a High Speed Interface Module that provides Wide Area Network (WAN) services. The HSIM has a DS3 interface (T3), providing up to 28 separate DS1 connections (T1). The HSIM-W87 design provides WAN connectivity to any SmartSwitch or Matrix E7 that supports HSIM connections. The HSIM-W87 operates in a switching/bridging mode. With minimal user configuration, the HSIM-W87 forwards data packets received by the host out the logical DS1 interfaces (the T1 lines). It will also forward packets received on the DS1 interfaces to or through the host. Up to 16 IP addresses can be configured for priority transmission across the HSIM-W87. The HSIM-W87 is configured using three windows: the T3 Configuration window, the T1 Configuration window, and the IP Priority Configuration window. These windows are explained in the following sections. The T3 Configuration Window You can set certain variables for the DS3 interface using the T3 Config window. To access the T3 Config window: 1. Click on the T3 port to access the Port menu. (To determine which port is a T3, select I/F Type from the Port Status menu. The T3 port will be labeled “DS-3”.) 2. Select HSIM W87 Config (T3). The T3 Config window, Figure 8-1, will appear. 8-1 HSIM-W87 Configuration Click here to select or deselect an option button. Figure 8-1. The T3 Config Window The T3 Config window provides the following information about the device’s T3 configuration and allows you to set certain values: Time Elapsed Indicates the number of seconds that have elapsed since the beginning of the near end current error-measurement period. To update this field you must close and reopen the window. Valid Intervals Displays the number of previous near end intervals for which valid data was collected. The value will be 96 unless the interface was brought online within the last 24 hours, in which case the value will be the number of complete 15-minute near end intervals since the interface has been online. For some firmware versions, the Valid Intervals field may display an incorrect value. NOTE 8-2 The T3 Configuration Window HSIM-W87 Configuration Line Status This field indicates the line status of the interface. It contains loopback state and failure state information. Scroll to view all of the status information, if necessary. T3 Line Type Select the type of DS3 or C-bit application implementing this interface: M23 or CbitParity. The type of interface affects the interpretation of the usage and error statistics. T3 Loop Back Select the loopback configuration of the T3 interface. Options are: No Loop Not in a loopback state. A device that is not capable of performing a loopback on the interface will always have this value. Payload The received signal at this interface is looped through the device. Typically the received signal is looped back for retransmission after it has passed through the devices’s framing function. Line Loop The received signal at this interface does not go through the device, but is looped back out. Transmit Clock Source Select the T3 Transmit Clock Source: Loop-Timing, which indicates that the recovered receive clock is used as the transmit clock, or Local-Timing, which indicates that an internal clock source is used. To change an option in the T3 Config window: 1. In the Line Type, Loop Back, and Transmit Clock Source sections, click to select the desired option. 2. Click the Apply button to set your changes. The T1 Configuration Window You can set certain variables for the DS1 connections using the T1 Config window. To access the T1 Config window: 1. Click on the appropriate Module Index to access the Module menu. 2. Select HSIM W87 Config (T1). The T1 Config window, Figure 8-2, will appear. The T1 Configuration Window 8-3 HSIM-W87 Configuration Click here to select or deselect an option. Figure 8-2. The T1 Config Window At the top of the T1 Config window a list box displays configuration information for each T1 connection (line). When you highlight a specific T1 line by clicking on it, the fields below the list box display the current values for that line, and allow you to change those values. The following information is displayed for each T1 connection: T1 Line Number Displays the unique identifier assigned to each T1 port on the HSIM. Time Elapsed Displays the number of seconds that have elapsed since the beginning of the current error-measurement period. To update this field you must click the Refresh button or close and reopen the window. 8-4 The T1 Configuration Window HSIM-W87 Configuration Valid Intervals Displays the number of previous intervals for which valid data was collected. The value will be 96 unless the interface was brought online within the last 24 hours, in which case the value will be the number of complete 15-minute intervals since the interface has been online. T1 Frame Type Displays the type of service you are using over your T1 line. This value should be set according to your WAN service provider’s instructions: ESF (Extended Super Frame DS1) or D4 (AT&T D4 format DS1). T1 Loop Back Displays the loopback configuration of the T1 interface. Values are: No Loop Not in a loopback state. A device that is not capable of performing a loopback on the interface will always have this value. Payload The received signal at this interface is looped through the device. Typically the received signal is looped back for retransmission after it has passed through the devices’s framing function. Line Loop The received signal at this interface does not go through the device, but is looped back out. Line Status This field indicates the line status of the interface. It contains loopback, failure, received alarms and transmitted alarm information. T1 Line BuildOut Displays the value of the Line Buildout setting. This setting controls the amount of attenuation of the T1 signal. The possible settings are 0 db, -7.5 db, and -15 db. This field is currently not supported and will appear grayed out. Transmit Clock Source Displays the T1 Transmit Clock Source: Loop-Timing, which indicates that the recovered receive clock is used as the transmit clock, and Local-Timing, which indicates that an internal clock source is used. Use the option boxes below the T1 list box to modify your T1 connections: 1. In the list box, click to highlight the T1 connection you wish to configure. 2. In the Frame Type, Loop Back, Line BuildOut, and Transmit Clock Source sections, click to select the desired option. 3. Click the Apply button to set your changes. You must click Apply after modifying each T1 connection. 4. Click the Refresh button to see your changes reflected in the list box. The T1 Configuration Window 8-5 HSIM-W87 Configuration Configuring IP Priority The IP Priority Configuration window allows you to assign priority transmission to up to 16 IP addresses communicating across the HSIM-W87. To access the IP Priority Config window: 1. Click on the appropriate Module Index to access the Module menu. 2. Select IP Priority Config. The IP Priority Config window, Figure 8-3, will appear. Figure 8-3. The IP Priority Config Window In the IP Priority Config window there several fields and a list box displaying the current IP addresses that have been configured for priority transmission. The following information is provided in the window: Max Entries This is a read-only field that displays the maximum number (16) of Priority IP addresses that can be configured. 8-6 Configuring IP Priority HSIM-W87 Configuration Number of Entries Displays the number of Priority IP addresses currently configured. This number will change each time you add or delete an IP address in the list box. Below these two fields is a list box displaying the currently configured IP Priority Addresses. Each address is automatically assigned an Address ID when it is configured. The lower the ID number, the higher the priority. IP Priority Queue Status This read-only field gives you the status (Enabled or Disabled) of IP Priority configuration. You can change the status using the Enable or Disable buttons. To configure IP Priority addresses: 1. In the IP Address field, enter the IP Address you want to configure in the appropriate X.X.X.X format. 2. Click the Add button to add the IP Address to the list box. Remember, you can configure a maximum of 16 IP addresses. 3. To delete an IP address, click to highlight the desired IP address in the list box and click the Delete button. 4. To enable or disable IP Priority Address configuration, click on the Enable or Disable button (in the IP Priority Queue Toggle section) as desired. The current status is displayed in the IP Priority Queue Status field. Configuring IP Priority 8-7 HSIM-W87 Configuration 8-8 Configuring IP Priority Index Symbols % Load 3-3 % of Tot. Errors 3-4 Numerics 6C107 1-1, 1-5, 1-6, 2-4, 2-5, 2-6, 2-10, 2-20, 2-104 802.1D 2-72, 2-76 802.1Q 1-5 1D Trunk 2-72, 2-76 1Q Trunk 2-72, 2-76 Default VLAN 2-74 discard format 2-77 Egress List 2-71 Egress List Configuration 2-78, 2-93 frame discard format 2-77 Hybrid 2-72, 2-76 Ingress List 2-71 Ingress List Configuration 2-75 Port Discard 2-77 Port Operational Mode 2-77 port types 2-72 Tagged frames 2-71 Untagged frames 2-71 VLAN Configuration 2-73, 2-81 VLAN ID 2-74, 2-76 VLAN name 2-74 802.1Q VLANs 2-70 A Absolute 6-11 absolute value (RMON) 4-2, 4-13, 4-20 Acceptable Frame Types 2-91 accessing the RMON Alarm/Event list 4-11 accessing the RMON Statistics window 3-1 Accum 3-5 Actions MIB 4-24 Active Users 5-3, 5-15 Address Mode 6-9 Admin 2-15, 2-16, 2-17 Admin/Link 2-15, 2-17 Advanced Alarms 4-2 Alarm Instance (RMON) 4-17 alarm limit timer interval 5-22 alarm log 4-5 alarm status (RMON) 4-13 alarm threshold (RMON) 4-1 Alarms Advanced 4-2 Basic 4-1 Alarms and Events 4-1 Alarms Watch (RMON) 4-12 Alignment Errors 5-4, 5-11, 5-21 Allow Port to be Disabled on Alarm 5-23 ATM 7-1 auto-negotiation 2-36 Average values 5-6 B BackPlane Config view 2-10 Backplane View 2-20 Bad Battery 2-53 Base MAC Address 2-25 Basic Alarms 4-1 Battery Capacity 2-53 Battery Output 2-53 Boot Prom 2-25 revision 2-5 BPDU 2-72 Bridge 2-15 Bridge Extension Configuration 2-81 Bridge Mapping 2-15 Bridge status mode 2-15 broadcast 2-71 broadcast peak 2-64 rate of peak 2-65 resetting peak information 2-66 time of peak 2-65 Broadcast Suppression 2-64 Receive Broadcast Threshold 2-66 Broadcast/Multicast 4-3 Broadcasts 5-4, 5-21, 5-23 Index-1 Index buffer space 2-31, 3-8 Bytes 3-3 C channel trunking 7-3 Chassis Backplane View 2-20 Chassis Type 2-4 claim token process 6-4 CMT 6-1, 6-5 Collisions 3-4, 5-4, 5-11, 5-23 Out-of-Window (OOW) 5-4, 5-11, 5-21 Collisions (%) 5-20 color codes 2-19 color-coded port display 2-2 community names 4-7 in traps 4-7 Concentrator Configuration window 6-3 Concentrator M Ports 6-5 Concentrator Non-M Ports 6-5 Concentrator Performance window 6-11 Configurable PVID Tagging 2-83 Configuring Alarms 5-22 Connection Management 6-1, 6-5 Connection Policy window 6-6 connection rules 6-7 Connection Status 2-4 CPU Management Reservation 2-69 CPU Type 2-67 CRC Errors 5-4, 5-11, 5-21 CRC/Alignment 3-4 creating and editing an RMON alarm 4-14 creating and editing an RMON event 4-21 Cumulative 6-11 Current Switch Utilization 2-68 D Default VLAN 2-74 deleting an RMON alarm, event, or action 4-26 delta value (RMON) 4-2, 4-13, 4-20 delta values 3-3, 3-5, 4-5, 4-8, 5-5, 6-11 Detect 6-3 Device Aging Time 5-14 device date 2-104 Device Menu 2-9 device time 2-103 Device Type 2-26 Directed 6-4 disable the port when an alarm condition occurs 5-23 Index-2 Discarded packets 2-31, 3-8 distributed management 1-1 DRAM Available 2-68 DRAM Installed 2-67 Drop Events 3-3 dual-homing 6-7 Duplex Mode 2-36 E Egress List building 2-80, 2-95 port configuration 2-78, 2-93 egress list 2-71 Egress State 2-88 Elapsed values 5-6 Encapsulation Type 7-3 error type breakdown 5-12 Errors Alignment 5-4, 5-11, 5-21 CRC 5-4, 5-11, 5-21 Framing 5-4, 5-11, 5-21 Hard 5-4 Soft 5-4 Total 5-11 Errors (%) 5-23 by type 5-21 Ethernet 802.2 frame 6-16 Ethernet 802.3 frame 6-17 Ethernet frame formats 6-16 Ethernet II frame 6-16 Ethernet SNAP frame 6-17 event (RMON) 4-1 event index 4-14 Event Log (RMON) 4-14 Event Type (RMON) 4-23 Events Watch 4-14 Events Watch (RMON) 4-12 Extended Multicast Filtering Service 2-82 F falling action 4-5, 4-8 falling alarm threshold 4-1, 4-2 falling threshold 4-5, 4-6, 4-8, 4-13, 4-19 FallingEventIndex 4-20 FallingThreshold 4-20 Fan Tray Status 2-6 Fast Ethernet Port Interface Modules descriptions 1-2 FDDI 802.2 frame 6-17 Index FDDI connection rules 6-7 FDDI frame formats 6-17 FDDI Frame Translation window 6-14 FDDI MAC frame 6-18 FDDI SNAP frame 6-17 FDDI Statistics poll rate 6-14 Filtering Database 2-71 fInNUcast 4-4 firmware versions 2-70 Firmware, revision 2-5 First Generation Modules 2-39 Flash Memory Available 2-67 Flash Memory Installed 2-67 Fragments 3-4 Frame Errors 6-12 Frame Priority Configuration window 2-62 Frame Size (Bytes) Packets 3-4 frame status breakdown 5-12 Frame Transfer Matrix (FTM) 1-1 frame translation Options – BRIM-F6 6-18 framing errors 5-4, 5-11, 5-21 Freeze Stats 3-6 I G Jabbers 3-4 GARP Times 2-99 Getting Help 1-7 Giants 5-4, 5-11, 5-21 Gigabit Ethernet 2-44 GMRP 2-83 GMRP Status 2-101 grouping of virtual connections 7-3 GVRP 2-83 H Hard Errors 5-4 Help button 1-7 Help Menu 2-12 High Speed Interface Modules descriptions 1-2 how rising and falling (RMON) thresholds work 4-27 HSIM-A6DP 2-71 HSIM-SSA710/20 1-3, 2-2 HSIM-W6 2-2 HSIM-W84 2-2 HSIM-W87 8-1 hysteresis 4-10, 4-27 I/F Summary interface performance statistics 2-28 window 2-28 IEEE 802.1Q 1-5, 2-70 IF Number 4-4 IF Type 4-5 ifInErrors 4-4 ifInOctets 4-3 Ingress Filtering 2-91 ingress list 2-71 ingress list configuration 2-75 Ingress User Priority 2-96 Interface Detail window 2-30 Interface Statistics window 2-30 IP address 2-4 IP Fragmentation 6-18 IP Priority Configuration 8-6 IP Priority Queue 8-7 Isolated 6-3 J K Kilobits 4-3 L LEC 2-71 Line 8-5 Line Loop 8-3, 8-5 Line Status 8-3, 8-5 Line Voltage 2-53 Link 2-17, 2-18 Link State Traps 5-24 LNK (Linked) 2-18 Load 2-29 Local Management 2-72 Local VLAN Capable 2-83 Local-Timing 8-3 Location 2-4 lockStatusChanged 5-27 Log Events (RMON) 4-23 Log/Trap 4-5 Logical Status 2-28 Logical view 2-10 Loop-Timing 8-3 Lost Frames 6-12 Index-3 Index M MAC address 2-5 MAC Based Priority Configuration 2-59 creating MAC based priority entries 2-60 MAC Path 6-5 MAC State 6-3 Master (M) port 6-5 Matrix 3-9, 4-1 Matrix e7 1-1, 1-2, 1-5, 1-6, 1-7, 2-1, 2-2, 2-4, 2-5, 2-7, 2-9, 2-10, 2-11, 2-12, 2-13, 2-14, 2-15, 2-16, 2-20, 2-22, 2-23, 2-24, 2-25, 2-32, 2-36, 2-37, 2-39, 2-49, 2-50, 2-51, 2-52, 2-53, 2-56, 2-57, 2-58, 2-59, 2-60, 2-62, 2-63, 2-66, 2-69, 2-70, 2-71, 2-105, 3-7, 3-9, 4-1, 4-23, 4-24, 4-25, 5-1, 6-1, 7-1, 7-2, 8-1 Max Entries 8-6 menu structure 2-7 MIB components 2-23 MIB II variables 4-4 MIB Tools 2-72 MIB Tree display 4-16, 4-26 module descriptions 1-2 Module Information window 2-24 Module Menus 2-12 Module type 2-26 multicast 2-71 Multicast (Non-Unicast) 2-31, 3-8 Out-of-Window (OOW) Collisions 5-4, 5-11, 5-21 Oversized 3-4 Owner (RMON) 4-16, 4-23 P N/A (not available) 2-18 network usage 5-1 newSourceAddress 5-27 NLK (Not Linked) 2-17, 2-18 No Loop 8-3, 8-5 No recent test 2-53 Node Class 6-10 Non-Op 6-3 Non-Op-Dup 6-3 Non-Unicast (Multicast) 2-31, 3-8 Not Available 6-3 Number of MACs 6-5 Number of Nodes 6-9 NVRAM Available 2-68 NVRAM Installed 2-68 packet capture events 4-1 Packet count 5-21 Packet Type 3-3 Packets 3-3, 5-23 Packets Received 2-32, 3-8 Packets Transmitted 2-32, 3-9 Payload 8-3, 8-5 Peak Switch Utilization 2-68 peak values 3-3, 3-4, 3-5, 5-6 Percent Load 5-10 Permanent Virtual Circuits (PVCs) 7-1 Physical Status 2-28 PIC chip 2-24 Polling Interval 4-5 Port Assignment 2-17, 2-75, 2-87, 2-89 Port Based VLAN 1-5 Port Menus 2-13 Port Number 4-4 Port Priority 2-96 Port Priority Configuration window 2-58 assigning transmit priority to ports 2-58 Port Redirect window 2-54 Port Status 2-5 color codes 2-19 Menu 2-10 Port VLAN ID 2-71 port-based VLANs 2-70 portLinkDown 5-26 portLinkUp 5-26 PortSecurityViolation 5-27 portSegmenting 5-26 PortTypeChanged 5-27 portUnsegmenting 5-26 portViolationReset 5-27 Power Redundancy 2-5 priority packet forwarding 2-56 Problems 3-4 PS #1/#2 Status 2-6 PVID 2-71, 2-74 O R N OFF 2-15, 2-17 ON 2-15, 2-17 Index-4 Rate 2-30 Raw 802.3 6-17 Index Raw Counts 2-29 Receive Broadcast Threshold 2-66 Receive Frames 6-12 redirecting traffic 2-54 Requested Target Token Rotation Time 6-4 Reset Peak Switch Utilization 2-68 restarting a device 2-4 Ring Configuration 6-6 Ring Management 6-1 Ring Ops 6-12 Ring-Op 6-3 Ring-Op-Dup 6-4 rising action 4-5, 4-8 rising alarm threshold 4-1, 4-2 rising threshold 4-5, 4-6, 4-8, 4-13, 4-19 RisingEventIndex 4-20 RisingThreshold 4-20 RMON alarm description 4-27 RMT 6-1 Runts 5-4, 5-11, 5-21 S Sample Type 4-20 Second Generation Modules 2-44 SecureFast switching 1-5 SEG (segmented) 2-17 Segmentation Traps 5-24 Selecting Port Status Views 2-14 setting an RMON alarm variable 4-16, 4-26 Setting Device or Port Alarm Limits 5-23 Setting the Alarm Limits Time Interval 5-22 SmartSwitch 6000 2-70 SMB 1 Prom Version 2-25 SMT Connection Policy 6-6 SMT Version 6-4 Soft Errors 5-4 SONET/SDH ports 1-2 source address 2-72 Source Address Traps 5-24 sourceAddressTimeout 5-27 Spanning Tree 2-71 SRAM Available 2-68 SRAM Installed 2-68 Startup Alarm 4-20 Static Entry Individual Port 2-82 Station List 6-9 Station Port 5-13, 5-15 Status (alarm) 4-5 Switched Virtual Circuits (SVCs) 7-1 System Resources window 2-66 T T1 Configuration 8-3 T1 Frame Type 8-5 T1 Line BuildOut 8-5 T1 Line Number 8-4 T1 Loop Back 8-5 T3 Configuration 8-1 T3 Line Type 8-3 T3 Loop Back 8-3 Tag Header 2-56, 2-70, 2-72 tagging 2-56 Test Results 2-53 threshold pairs 4-28 threshold value 5-23 Time Elapsed 8-2, 8-4 time interval 5-22 Timer Statistics time interval 5-8 T-Neg. 6-5 to change the status view of your ports 2-14 Top Level Serial Number 2-25 Topology 6-10 Topology Status 5-15 Total 3-5 Total Errors 4-3, 5-11 Trace 6-4 traditional switching (or bridging) 1-5 Traffic Class (queue number) 2-98 Traffic Classes 2-82 transmission queue 2-57 Transmit Clock Source 8-3, 8-5 Transmit Frames 6-12 transmit priority levels 2-57 Transmit Queue Size 2-32, 3-9 Trap (RMON) 4-23 trap selection current status 5-25 trap table 5-17, 5-24 traps 5-24 T-Req. 6-4 Troubleshooting 2-31, 3-8, 5-11 Trunk Port 5-13, 5-15 twisted ring 6-7 U Undersized 3-4 Unicast 2-31, 2-71, 3-8 Index-5 Index Unit Failed 2-53 Unit in test 2-53 Unit OK 2-53 Unknown Protocol 2-32, 3-8 UPS ID 2-52 UPS Uptime 2-52 Upstream Neighbor 6-10 UpTime 2-4 Utilities Menu 2-12 V Valid Intervals 8-2, 8-5 VC MUX 802.3 Bridging 7-3, 7-4 View Menu 2-10 viewing an RMON event log 4-27 Virtual Channel Identifier (VCI) 7-3 Virtual Local Area Network 2-70 Virtual Path Identifier (VPI) 7-3 VLAN 1-5, 2-70, 2-71, 2-72 VLAN Configuration 2-73 VLAN ID 2-70, 2-72, 2-74, 2-76 VLAN Learning 2-82 VLAN Mapping 2-11 VLAN Name 2-74 VLAN port assignment 2-75 VLAN tag 2-70 W within 5-22 wrapped ring 6-7 Index-6